Cookies on this website.

Cookies are small text files placed on your device by a website. Similar technologies include local storage in your browser. UK rules on cookies come from the Privacy and Electronic Communications Regulations (PECR) and, where personal data is involved, UK GDPR.

All cookies on this site are strictly necessary, which means they are exempt from consent under PECR regulation 6(4).

• nexstone.session_token — set only after a member of staff signs in to the admin area. Keeps that person signed in. Expires after 7 days or on sign-out. Not set for ordinary visitors.
• nexstone.session_data — a short-lived cache of the signed-in session (5 minutes) that avoids a database lookup on every admin request. Staff only.
• nexstone.assistant.session — set in your browser's local storage only if you open the "Ask us" assistant. A random id that keeps your conversation together for the visit; it identifies nobody and expires when you clear site data. Transcripts are kept for 12 months to improve answers and are never sold or shared.
• Call recordings — if you phone the assistant line, or use the call demo page, the call is recorded after the announcement so the team can act on it. Recordings and transcripts are visible to staff only, kept for 12 months, and deleted on request.
• Security and rate-limiting — our hosting provider may set a short-lived cookie or use a hashed network address to protect forms and the sign-in page from abuse. This does not identify you across sites.

Local storage: the site may remember a dismissed notice or a preference in your browser. This stays on your device and is never sent to us.

• No advertising or retargeting cookies.
• No third-party analytics cookies (for example Google Analytics).
• No social media tracking pixels.
• No embedded video or map iframes that set their own cookies.

Fonts are loaded from Google Fonts. Google may see your IP address when the font files are requested; no cookies are set by that request. Our hosting (Vercel) and database/storage provider (Supabase) process data on our behalf under contract.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will prevent staff from signing in to the admin area but does not affect browsing the public site. Guidance for common browsers is published by the Information Commissioner’s Office at ico.org.uk.

If we ever add analytics, marketing or other non-essential cookies, we will update this policy first and ask for your consent before setting them. Questions: info@nexstone.co.uk.