Cookie notice
What we store in your browser
This notice is written from an audit of what this site actually loads — not from a template. Two analytics tools are installed, Google Analytics 4 and Microsoft Clarity, and neither loads until you turn the analytics purpose on. One advertising tool, Meta Pixel, stays off until you turn the marketing purpose on. No visitor-identification tool is installed.
Your choice
When you first arrive you can accept all purposes, reject every optional purpose, or open the detail and choose per purpose. Rejecting is a single click, exactly like accepting, and no optional toggle is pre-selected. Your decision is stored for 180 days and we ask again only when it expires or when we add a new purpose or tool.
If your browser sends a Global Privacy Control signal we treat it as an opt-out of sharing your visit for targeted marketing, and the marketing purpose stays off. We do not read it as a decision about analytics, and we make no claim of certification under any particular law here — this notice describes what the site does.
Strictly necessary — always on
These are needed for sign-in, form submission, security and to remember your cookie choice. The site cannot work without them, so they are not optional.
summit_consent
Records your cookie choice, when you made it and which version of this notice it was made against. Contains no personal data.
Set by Summit Studio (first party) · Kept for 180 days
sb-…-auth-token
Keeps you signed in to the client portal and lets the server confirm your account when you load a page or submit a form. Set only if you sign in.
Set by Summit Studio, via our hosting and database provider · Kept for Until you sign out or the session expires
sidebar_state
Remembers whether a navigation panel is expanded inside signed-in screens. Interface state only.
Set by Summit Studio (first party) · Kept for 7 days
Optional purposes
Analytics — off by default
Lets us measure which pages are read and where people get stuck. Two tools are used for this purpose: Google Analytics 4 (page views and site usage) and Microsoft Clarity (aggregated interaction and scroll behaviour, with page content masked). Neither is used for advertising, and both load only after you turn this purpose on. If we add another, this notice and its version will be updated first.
This purpose also covers two values we store ourselves, in your browser's local storage, if you arrive from one of our adverts or campaign links: summit_first_touch and summit_last_touch. They hold the campaign details that were already in the link you clicked — such as the campaign name and the advert reference — the page you landed on and the time, so that if you later create an account we can tell which campaign brought you. They contain no name, email address or identifier we set. They are kept for a maximum of 30 days, older records are deleted, and they are written only while analytics is on and removed if you turn it off.
If analytics is off, campaign details in the link you clicked may still travel in the web address itself and be submitted with an account you create or a request you deliberately send us. Nothing is stored in your browser to do that.
Marketing — off by default
Would let advertising or visitor-intelligence tools recognise your visit. Meta Pixel (Facebook/Instagram) loads only if you turn this on. It measures ad performance and builds ad audiences, sets the _fbp and _fbc cookies, and records page views, signup-button clicks and plan-details requests in your browser. When you send us a consultation request, we also tell Meta about that enquiry from our server (plan, campaign source, browser type and any Facebook click ID; never your name or email). Browsers sending Global Privacy Control are treated as a marketing opt-out. Turning marketing off stops both. Summit Signal visitor intelligence is in development and no visitor-identification script is installed here.
Every optional tool must be registered in one central place in our code and can only be loaded through the consent check, so a tag cannot be added to a page and quietly bypass your choice. Optional tools never load on the client portal, admin screens or sign-in pages at all.
Changing your mind, and what we cannot do
Use Cookie preferences in the footer at any time. Withdrawing consent stops further optional activity, removes the cookies and stored values we control — including the two campaign attribution values above — and removes the tool's script from the page.
Honestly stated limits: a third party cannot be made to delete data it already holds, or cookies it set on its own domain, from this page — that is done through their own controls or a request to them. Reloading the page guarantees nothing optional is running.
Other requests your browser makes
Our typefaces are served by Google Fonts, so your browser requests those font files from Google and Google receives the request. This is needed to display the site as designed and sets no cookie for us. Everything else — pages, forms and sign-in — is served from our own domain and database provider.