Cookie policy

Moutrey Creative Enterprises Ltd

Master draft version 1 • Prepared 10 September 2026

Draft for factual confirmation before publication. Complete the highlighted fields and the website schedule. Remove the internal implementation appendix from the public version.

1 About this policy

This policy explains how Moutrey Creative Enterprises Ltd (we, us or our) uses cookies and similar technologies on websites it operates under Moutrey Creative and its trading names. It covers our audio, production, art, portrait, wedding painting, teaching, events, retreats, community and digital-product services where offered through those websites.

The website schedule in section 13 identifies the particular domain, its legal operator and the technologies actually used. Read this policy with that schedule and our master privacy policy, which explains wider use of personal information, suppliers, international transfers, retention and your rights.

Company number: [INSERT COMPANY NUMBER]

Registered office and postal contact: [INSERT FULL ADDRESS]

Cookie and privacy enquiries: admin@moutreycreative.com

Privacy policy: Read our privacy policy

The policy applies only where the named operator has adopted it for the website concerned. An associated business or separate company is not automatically covered because it shares our branding. Each future website must have an accurate schedule before it adopts this policy. A coming-soon site can still use cookies or collect technical information.

2 Cookies and similar technologies explained

A cookie is a small item of information saved in your browser and made available on later requests. First-party cookies are associated with the website domain you visit; third-party cookies are associated with another domain. These labels describe the technical setup and do not, by themselves, determine who receives information or whether consent is needed.

Session cookies are generally intended to last for the browsing session. Persistent cookies have a longer expiry period, although you or your browser may remove them earlier. Some cookies renew when used; our schedule identifies the actual duration and renewal behaviour where relevant.

Similar technologies include local storage and session storage, tracking pixels, identifiers attached to links, scripts or tags, and techniques that recognise a device from its characteristics. Local storage does not necessarily expire automatically; any time limit described in the schedule must be enforced by the website. A tag can contact another service even without writing a conventional cookie.

In this policy, “cookies” is shorthand for these storage and access technologies where applicable. Calling a service “cookieless”, using a first-party domain or moving processing to a server does not automatically remove privacy obligations.

3 What information is involved

Depending on the active technology, information may include a browser or device identifier, IP address, device and browser type, language, privacy choices, referring page, timestamps, pages viewed, media interactions and events such as starting an enquiry or completing a purchase. Some tools infer an approximate location from an IP address.

Our website schedule describes the information and purposes for the services actually enabled. We minimise collection and do not intentionally put private enquiry text, portrait reference material, interview content, payment-card details or health information into analytics or advertising events. Contact-form submissions and uploaded creative material are covered by the privacy policy and relevant service notice.

Information collected by these technologies may be personal information even if it does not include your name. Statistics described as anonymous are treated as such only where people cannot reasonably be identified; replacing a name with an identifier does not necessarily anonymise data.

4 The purposes for which we use cookies

Not every category below is used on every website. The active categories and technologies appear in the website schedule and, where applicable, in Cookie settings. We classify technologies by what they actually do, including any additional use by a provider.

Essential functions and security

These technologies support functions such as remembering your privacy choice, maintaining a requested shopping basket or login, submitting a form securely, processing a requested payment, or protecting the service against fraud and abuse. We use them without consent only where an applicable legal exception is met. A tool is not automatically essential just because it is convenient for us or appears on a checkout page.

Preferences and optional features

These may remember optional settings or enable additional functionality. We seek consent unless the specific operation qualifies for an exception, such as a narrowly defined appearance or requested-service use. The schedule distinguishes these uses and gives any required objection control. We do not classify every preference cookie as essential.

Analytics and service improvement

These may help us understand which pages or services are used and whether a website works well. Our standard approach across the business is to obtain consent before optional analytics runs. Where a site instead relies on the limited statistical-purposes exception, its schedule explicitly explains that use and the simple, free way to object. We assess the configuration, permitted purpose and provider’s use; the name of an analytics product is not proof that the exception applies.

Advertising and campaign measurement

Where enabled, these technologies may connect an advert to a later visit or enquiry, measure campaign performance, limit repeat advertising or build audiences for relevant adverts. Tracking for advertising and related profiling requires consent. It is optional and kept separate from essential functions. The schedule identifies participating providers and whether information is combined with their other information. We do not knowingly use behavioural advertising directed at children.

Embedded media and external content

Audio players, video, maps, social feeds, booking tools and similar features may connect your browser with their provider. We identify the provider and explain relevant use before activation. A narrowly limited operation needed to deliver content you knowingly request may qualify for an exception; additional analytics or advertising activity is assessed separately. Pressing play is not blanket permission for unrelated tracking.

5 The rules we apply

We follow the applicable Privacy and Electronic Communications Regulations, UK GDPR and Data Protection Act 2018, as amended, including by the Data (Use and Access) Act 2025. The rules on storing or accessing device information apply even where that information is not personal data.

Where consent is required, we obtain it before the relevant technology is used. We do not replace that requirement with a claim of legitimate interests. If a lawful storage-and-access exception applies, personal-data processing still needs an appropriate UK GDPR basis and transparency, as explained in the privacy policy and site schedule.

Exceptions are assessed for the particular purpose. A technology that serves an exempt function as well as a non-exempt tracking purpose cannot be enabled without the consent needed for the latter. An exemption for limited statistics is not permission to reuse that information for advertising or profiling.

6 Making a choice

Where the site uses consent-based technologies, its banner gives clear options to accept optional cookies, reject optional cookies or choose settings. Acceptance and rejection are presented with comparable prominence and ease. Optional purposes are off until you actively choose them, unless a previously saved valid choice applies.

Cookie settings describes each active optional purpose and the relevant providers so you can make an informed choice. Where a statutory exception requires an objection mechanism, that control is explained separately and remains easy to use. Any provider-specific controls needed for valid consent are made available.

Ignoring or closing the banner, scrolling, continuing to browse, accepting purchase terms or submitting an enquiry is not consent to optional tracking. Cookie choices are separate from newsletter subscriptions and permission to publish your image or voice.

You can browse the basic website and enquire without accepting optional tracking. Some external features may remain unloaded until you choose to enable them. Where practical, we provide a direct external link or another way to contact or book with us. A website using only exempt technologies may provide information without asking you to accept optional cookies that it does not use.

7 Changing or withdrawing your choice

Use the Cookie settings link on the website to review or withdraw consent at any time. You can turn off an optional purpose or reject all optional cookies and save your choice. Where the site provides a control for exempt statistical or appearance processing, you can object through the stated control without charge.

After withdrawal, we stop the relevant consent-based collection and processing, remove the relevant stored items within our control, and communicate withdrawal to the providers concerned. We also treat withdrawal as an erasure request for personal information gathered under that consent, subject to applicable legal exceptions and necessary verification. The privacy policy explains your rights and how to contact us.

Withdrawal does not make earlier processing unlawful. Information retained for a separate lawful obligation is limited to that purpose. We do not silently switch consent-based tracking to another legal basis after you withdraw.

A browser may prevent us from deleting cookies belonging to another domain directly. We implement available provider controls and explain any further browser or provider steps needed. Browser restrictions do not remove our responsibility to stop the tracking we control or to handle withdrawal and erasure properly.

8 Remembering choices and retention

A preference cookie or similar record helps the website remember both acceptance and rejection. The schedule gives its storage period and the period for any separate consent evidence, such as the choice, time and notice version. We keep only proportionate evidence for respecting your preferences and demonstrating compliance.

The expiry of a cookie, retention of information already collected and duration of a consent record are different matters. The website schedule gives the relevant periods, including whether an identifier’s expiry is renewed. The privacy policy provides the wider retention rules.

We refresh choices when needed because purposes or providers change, the saved record expires or consent no longer covers the proposed use. We do not repeatedly prompt you simply to change a refusal. A material new tracking use remains off until the necessary fresh permission is obtained.

If you clear browser storage, change browser or device, or use a private browsing session, the site may no longer recognise your choice and may ask again. Deleting a local preference does not necessarily delete separate information already held by a provider; use the withdrawal controls or contact us for help with that information.

9 Choices across our websites

Cookie choices normally apply to the specific website and browser or device where you made them. Accepting cookies on Drum Break, for example, does not automatically authorise tracking on an art, wedding or audio-production website owned by the same company.

We do not treat this master policy as consent to connect your browsing across all Moutrey Creative websites. If a service proposes cross-domain measurement or shared identifiers, its schedule and consent information identify the domains, purposes, providers and choices before the activity begins. A shared administrator or analytics account does not itself provide that permission.

Subdomains and external booking or payment pages may have different operators or technical arrangements. The schedule explains any relevant shared scope. Your marketing preferences are managed separately as set out in the privacy policy.

10 External providers and links

The schedule names the actual providers receiving information through cookies or related requests, explains their role and purposes, and links to their privacy information. Some work only on our instructions; others are independent or joint controllers for particular processing. We remain responsible for our own use of technologies on our websites.

If an embedded service can track visitors before interaction, we configure and control it so non-exempt tracking does not start before consent. We do not assume that a provider’s “privacy mode” blocks every request or tracking activity.

Following a normal external link takes you to a service with its own controls and policy. A link containing tracking identifiers, or a feature making requests before you click, is assessed separately. Where information is processed outside the UK, the privacy policy and website schedule explain the relevant arrangements and safeguards. Consent to cookies is not blanket consent to unrestricted overseas transfers.

11 Browser controls

Most browsers let you inspect or delete stored site information and restrict cookies. The browser’s help pages explain the available controls. Blocking all cookies may affect functions you request, such as checkout, login or remembering preferences. Blocking third-party cookies alone may not stop first-party identifiers, pixels or other tracking.

You can use browser controls in addition to the website’s Cookie settings. We do not assume that a browser’s default settings, or absence of a privacy signal, means you have consented. Where a site supports an automated preference signal, its schedule explains the effect. For a reliable choice on our site, use the published controls or contact us if they do not work.

12 Questions and policy changes

Contact admin@moutreycreative.com about cookies, a control that is not working or information collected through a website. Please identify the domain and approximate date of the issue; do not send sensitive browsing information unless needed. Our master privacy policy explains privacy requests and complaints, including the right to contact the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.

We update this policy and each site schedule as technologies and services change. Updating the document alone does not authorise a new purpose. We seek fresh consent where required and maintain a dated record of the policy and controls used.

Published effective date: [INSERT DATE AFTER CONFIRMATION]

Website cookie schedule

Current website configuration: moutreycreative.com uses Google Analytics 4 (G-21L3BHPB84) only after analytics consent. Google receives usage events and browser/device information. Advertising consent, Google signals and ad personalisation are disabled in the site code. Analytics cookies (_ga and _ga_21L3BHPB84) are configured for a maximum of 180 days without automatic renewal. Cookie settings lets you withdraw consent; this disables collection, clears accessible Analytics cookies and reloads the page. Deleting cookies does not delete information already held by Google.

The choice record mce-cookie-consent-v2 is held in this browser’s local storage, with a 180-day validity period, and contains the choice, notice version and timestamp. There is no separate server-side consent record. Earlier choices are refreshed because Analytics is newly introduced. Google Analytics property retention settings still require confirmation. Google privacy policy.

Section 13 • Complete and publish for each website adopting this policy

This schedule forms part of the cookie policy for the website below. It must describe deployed behaviour, not planned tools. For a category with no active technologies, state “Not used”.

Website and trading name: [INSERT EXACT DOMAIN AND NAME]

Legal operator: [CONFIRM FULL LEGAL ENTITY]

Cookie settings control: [INSERT WORKING CONTROL OR EXPLAIN IF ONLY EXEMPT TECHNOLOGIES ARE USED]

Privacy policy: Read our privacy policy

Domains or subdomains covered by this choice: [SPECIFY]

Schedule last checked and effective date: [INSERT DATES]

Active technology record

Repeat this record for each cookie or technology, including local storage and non-cookie requests. Where a group of identifiers shares identical behaviour, explain the pattern clearly. Replace every placeholder with verified information.

Name or identifier: [EXACT COOKIE NAME, STORAGE KEY OR TECHNOLOGY]

Provider and setting domain: [LEGAL PROVIDER NAME AND DOMAIN]

Category and precise purpose: [STATE EACH PURPOSE]

When it runs: [ON PAGE LOAD, AFTER CONSENT OR AFTER A NAMED USER ACTION]

Information collected and recipients: [SPECIFY DATA AND RECIPIENTS]

Device storage lifetime: [SESSION OR VERIFIED DURATION; STATE RENEWAL BEHAVIOUR]

Retention of collected information: [VERIFIED PERIOD OR CLEAR CRITERIA]

Legal route: [CONSENT OR THE SPECIFIC STORAGE-AND-ACCESS EXCEPTION; STATE THE UK GDPR BASIS IF PERSONAL DATA IS PROCESSED]

Control and withdrawal or objection route: [IDENTIFY THE ACTUAL CONTROL AND EFFECT]

Provider role and privacy link: [PROCESSOR, INDEPENDENT OR JOINT CONTROLLER FOR THE RELEVANT PURPOSE AND WORKING LINK]

International arrangements: [RELEVANT COUNTRIES AND SAFEGUARDS OR LINK TO PRECISE DETAILS IN THE PRIVACY SCHEDULE]

Consent preference and evidence records

Preference storage item and expiry: [CONFIRM NAME, LOCATION AND PERIOD]

Separate consent evidence: [STATE WHAT IS RECORDED, WHERE AND HOW LONG, OR STATE NONE AND VERIFY HOW CONSENT IS DEMONSTRATED]

Refresh arrangements: [STATE THE IMPLEMENTED INTERVAL AND MATERIAL-CHANGE TRIGGER]