What cookies are
Cookies are small files a website saves in your browser. Some are needed for the site to work. Others help the website owner understand how the site is used or measure advertising — those need your permission first.
Cookies we always use
These are strictly necessary. They keep our forms working and secure, so they don’t need your consent.
| Cookie | What it does | How long it lasts |
|---|---|---|
eicr-london-pro-session | Keeps your visit going while you use our forms — for example, remembers which step of the booking form you’re on | 2 hours |
XSRF-TOKEN | Security: protects our forms from being submitted by other websites | 2 hours |
eicr_consent | Remembers your cookie choices, so we don’t ask on every page | 12 months |
__cf_bm | Set by Cloudflare, our security provider, to tell real visitors from bots | 30 minutes |
Our forms also use Cloudflare Turnstile — the “I’m not a robot” check. It runs from Cloudflare’s own servers and is used only to protect our forms from spam.
Cookies we only use if you accept
We don’t load these tools at all until you accept. If you choose “Reject all”, none of them are set.
| Provider | Cookies | Why | How long |
|---|---|---|---|
| Google Analytics | _ga, _ga_… | Counts visits and shows how people use the site | Up to 2 years |
| Google Ads | _gcl_au, and _gcl_aw if you came from a Google advert; gwcc if we show you a Google call-tracking number | Shows whether a Google advert led to an enquiry or a call, and lets Google show our ads to people who’ve visited | 90 days |
| Microsoft Advertising | _uetsid, _uetvid (with _uetsid_exp, _uetvid_exp), MUID, and _uetmsclkid if you came from a Microsoft advert | Shows whether a Microsoft (Bing) advert led to an enquiry, and lets Microsoft show our ads to people who’ve visited | 1 day to 13 months |
| Meta (Facebook, Instagram) | _fbp, and _fbc if you came from a Meta advert | Shows whether a Meta advert led to an enquiry | 90 days |
If you accept advertising cookies and then send us an enquiry, we tell Google, Microsoft and Meta that an enquiry happened, so we can see which adverts work. Your email address and phone number are only ever shared in a scrambled (hashed) form that can’t be read, and only if you accepted advertising cookies. Read how Google uses information from sites that use its services.
Cookie-free statistics
We also use Cloudflare Web Analytics, which counts page views without using cookies or tracking you across websites.
Changing your choice
You can change your mind at any time with the Cookie settings link at the bottom of every page. If you turn analytics or advertising cookies off, we stop those tools and delete their cookies from our website. You can also delete cookies or block them in your browser settings — but if you block strictly necessary cookies, our forms may not work.
For more about how we use personal information, see our privacy notice.