Cookie Policy
This Cookie Policy explains how Torsik Ltd uses cookies and similar technologies on torsik.co.uk. Read it alongside our Privacy Policy and Terms & Conditions.
01. Who we are
Torsik Ltd (Company No. 16864103), registered in England and Wales. Registered office: Bartle House, Oxford Court, Manchester, England, M2 3WQ. Email: info@torsik.co.uk. We are registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC138992.
02. What cookies are
Cookies are small text files placed on your device when you visit a website. Similar technologies, such as pixels, tags and local storage, work in comparable ways. They let the site remember your actions and preferences and help us understand how the site is used.
03. The rules we follow
Our use of cookies is governed by the Privacy and Electronic Communications Regulations (PECR), as amended by the Data (Use and Access) Act 2025, and by UK GDPR where a cookie processes personal data. Changes that took effect on 5 February 2026 introduced limited exceptions for certain low-risk technologies, including some statistical-purpose technologies. An exception applies only when every statutory condition is met. Otherwise, consent is required.
04. The cookies we use
| Category | Consent needed | What they do | Set by |
|---|---|---|---|
| Strictly necessary | No | Make the site work: security, page loading, remembering cookie choices and allowing forms or pages to function. | Torsik, Squarespace and related hosting infrastructure. |
| Functional / preferences | No, where they are genuinely needed for the preference requested by the visitor. | Remember choices such as cookie preferences and statistics objections. | Torsik and Squarespace. |
| Aggregate site statistics | No, where every statistical-purpose exception condition is met and the visitor has not objected. | Count visits, sessions, pages, sources, device type, browser family, viewport size, scroll depth, clicks and form attempts so we can improve the website. | Torsik first-party website analytics. |
| Analytics cookies | Yes. | Allow first-party visitor IDs, GA4 consent-mode measurement, heatmaps, session replay and more detailed journey analysis. | Torsik, Google Analytics 4 and Microsoft Clarity. |
| Marketing / third party | Yes. | Allow advertising measurement and continuing identified journey measurement after a personalised Torsik link is used. | Torsik, LinkedIn, Instagram (Meta), X, Google and other third-party services where used. |
We will rely on the statistical-purpose exception only where the technology is used solely to improve this website, any third party acts only on our behalf, the information is not linked with other data or used for advertising, individual-level information is kept only as long as needed to produce aggregate statistics, and visitors receive clear information plus a simple and free way to object.
05. First-party cookies we set
| Name | Purpose | Duration | When used |
|---|---|---|---|
| tk_consent | Stores your cookie and statistics choices, policy version and a consent record ID. | 180 days | Always, after a choice is saved. |
| tk_stats_optout | Records that you objected to aggregate site statistics. | 180 days | Only if you turn aggregate site statistics off. |
| tk_stat_session | Short first-party session ID used to count sessions and avoid double counting aggregate site statistics. | 30 minutes | Used unless you object to aggregate site statistics. |
| tk_visitor_id | First-party visitor ID for consented analytics and journey analysis. | 365 days | Only after Accept all. |
| tk_session_id | First-party session ID for consented analytics and journey analysis. | 30 minutes | Only after Accept all. |
| tk_lead_source | Stores permitted campaign source information and can support CRM-linked website activity from a personalised Torsik link. | 90 days | Only after Accept all. |
| _ga / _ga_* | Google Analytics cookies, if GA4 is enabled and analytics consent has been granted. | Set by Google | Only if analytics cookies are accepted. |
| _clck / _clsk | Microsoft Clarity cookies for consented heatmaps, session replay and behaviour analytics. | Set by Microsoft Clarity | Only if analytics cookies are accepted. |
06. Your two choices
When you first visit the site, the banner gives you two choices. Accept all allows aggregate site statistics, analytics, Marketing cookies and optional embedded services. Marketing consent also allows continuing identified journey measurement after a personalised Torsik link is used. Reject optional turns all of those off, including the limited aggregate statistics that may otherwise operate under the statistical-purpose exception. Strictly necessary storage remains in use so the site can work and remember your choice.
You can change your choice at any time through Cookie settings in the site footer. Cookie settings presents the same two choices. Selecting Reject optional after an earlier acceptance stops future optional measurement and deletes the first-party visitor and session cookies controlled by Torsik. Information already lawfully recorded remains available for rights requests, including deletion or restriction where those rights apply.
You can also control cookies through your browser settings, and opt out of Google Analytics using Google's browser add-on at tools.google.com/dlpage/gaoptout. Blocking strictly necessary cookies may stop parts of the site working.
07. What we collect before you accept optional cookies
Until you select Accept all, optional analytics, marketing and embedded services remain off. Unless you select Reject optional, we may collect limited first-party statistics under the statistical-purpose exception, such as page path, event type, referrer domain, device type, browser family, viewport size, scroll depth, clicks and form attempts. We do not set a long-lived visitor ID for this stream, send it to GA4, use it for advertising, or keep individual-level information longer than needed to produce aggregate statistics.
When a personalised Torsik link is first used, limited request information may be used to classify the request as Likely security or Likely human. This can include IP-derived country, a protected IP hash, device type, browser family, operating-system family and automation or security signals. We use the raw IP address only long enough to derive limited location information and the protected hash, then delete the raw value from this process. A Likely security request creates no Zoho CRM event. If the request is Likely human, we may record that the personalised link was used against the CRM record assigned to it. That narrow response record does not include the person's later page journey. A forwarded link or shared device means it does not prove that the named person used the link.
After you select Accept all, Marketing consent allows Torsik to connect later website activity from a personalised link to the assigned CRM record. The summary can include pages viewed, measured active time, recorded actions, broad device, browser, operating-system and country information, consent evidence and campaign context. Detailed identifiable journey records are retained for up to 24 months from collection. Other personal records created by this personalised-link and website-measurement flow, including Likely human response records, campaign attribution, consent evidence and CRM journey summaries, are retained for up to five years from collection. Truly anonymised aggregate statistics may be retained indefinitely. You can stop future optional collection through Cookie settings by selecting Reject optional. You can object to the first-request signal at any time by emailing info@torsik.co.uk.
08. Changes to this policy
We may update this Cookie Policy from time to time. The latest version will always appear on this page, with the date at the top.
09. Contact
Questions about cookies or your data: info@torsik.co.uk. You also have the right to complain to the ICO at ico.org.uk or on 0303 123 1113.
Start a conversation.
Bring us a market question the leadership team cannot yet answer. We will tell you whether it fits a defined product, what evidence it needs, and what the fixed fee would be. If it does not fit, we will say so.