Last Updated: 19 May, 2026

Cookie Policy

Version 2.0

How Revmai uses cookies and similar technologies on revmai.com

ON THIS PAGE

We take your privacy seriously

If you have any questions about this policy or how we handle your data, we’re here to help.

Contact Us ➔

About this policy

This Cookie Policy explains how Revmai Ltd (“Revmai”, “we”, “us”, “our”) uses cookies and similar technologies on revmai.com. It should be read alongside our Privacy Policy, which describes how we handle personal data more generally.

Revmai Ltd is a company registered in England and Wales with company number 16515498, whose registered office is at 30 The Causeway, Chatham, ME4 3SR, United Kingdom. For UK GDPR purposes, Revmai is the controller of the personal data collected through cookies on revmai.com.

This policy is issued to meet our obligations under the Privacy and Electronic Communications Regulations 2003 (“PECR”), as amended (including by the Data (Use and Access) Act 2025), the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. It reflects the ICO’s guidance on the use of storage and access technologies (April 2026).


What cookies (and similar technologies) are

A cookie is a small text file placed on your device when you visit a website. Cookies are widely used to make websites work, to make them work more efficiently, and to provide information to the website operator.

The law applies to any technology that stores information on, or accesses information already stored on, your device — however it is labelled. In this policy, “cookies” therefore also covers:

  • Tracking pixels and web beacons (small image or script tags used to detect interactions).
  • Local storage and session storage (data stored by your browser at the website’s request).
  • Scripts, tags and link decoration that read or write information on your device.
  • Device fingerprinting techniques, where used (we do not use these).

 

Under PECR Regulation 6, as amended by the Data (Use and Access) Act 2025 with effect from 5 February 2026, storing information on, or gaining access to information stored on, your device requires your consent unless an exception applies. The exceptions are:

 

  • Strictly necessary. The storage or access is strictly necessary to provide an online service you have requested.
  • Communication. The storage or access is solely for transmitting a communication over an electronic communications network.
  • Statistical purposes. New from 5 February 2026. The sole purpose is to collect statistical information about how the service is used, in order to improve it — and only where we give you clear information about it and a simple, free way to object.
  • Appearance and functionality. New from 5 February 2026. The sole purpose is to adapt how the service appears or functions according to your preferences — again, only with clear information and a simple, free way to object.
  • Emergency assistance. New from 5 February 2026. The storage or access is necessary to communicate your location to emergency services.

 

This policy, our consent banner and the objection mechanisms described below are how we comply with these rules. The ICO interprets all of these exceptions narrowly, and where we are in any doubt we ask for consent.


The categories of cookies we use

We classify each cookie into one of four categories, in line with ICO guidance:

  • Strictly necessary. Required for the website to function. These do not require your consent under PECR, but we still disclose them here for transparency.
  • Functional / preference. Remember choices you have made (e.g. language, region, a dismissed pop-up, your cookie preferences). Some of these could fall within the new “appearance and functionality” exception; at present we take the conservative approach and set them only with your consent.
  • Analytics / performance. Help us understand how visitors use the site. Since 5 February 2026, PECR contains a “statistical purposes” exception that can permit some analytics without consent — but only where any third-party provider acts solely on our behalf as a processor and does not use the data for its own purposes. Because Google Analytics does not meet that condition in our current configuration, we will not load Google Analytics 4 or any other analytics tool until you give consent.
  • Marketing / advertising. Used to build a profile of your interests for advertising or to track conversions. These always require consent — the new exceptions never apply to advertising or to sharing data with third parties for their own purposes.

Strictly necessary cookies

These cookies are essential for the site to work. They are set when you visit revmai.com and you cannot disable them through our consent banner. You can still block them in your browser settings, but parts of the site may not work. revmai.com runs on WordPress, which sets the following:


Functional and preference cookies

These cookies and local-storage keys remember choices you have made on the site, so we don’t have to ask you again. Although some could fall within the appearance and functionality exception, we currently set them only after you give consent in the cookie banner.


Analytics cookies

These cookies help us understand how the site is used so we can improve it. They collect aggregated, mostly statistical information about visitors. They are set only after you give consent.

Why we still ask for consent for analytics

PECR’s new statistical purposes exception (in force 5 February 2026) only applies where any third-party analytics provider acts solely as our processor and does not use the collected data for its own purposes. Google’s standard Google Analytics terms do not satisfy this condition, so we continue to ask for your consent before loading GA4. If we move to an analytics tool that does satisfy the exception (for example, a self-hosted or processor-only analytics service), we will update this policy, give clear information about that use, and provide a simple, free way to object.


Marketing and advertising cookies

These cookies are used to build a picture of your interests and to measure the effectiveness of marketing campaigns. They are set only after you give consent in the cookie banner. The PECR exceptions described in Section 2 never apply to this category.

Current position

As at the date of this policy, Revmai does not run third-party marketing or retargeting cookies (such as the LinkedIn Insight Tag, Meta Pixel, X/Twitter Pixel, Google Ads conversion tags or HubSpot tracking) on revmai.com. If we introduce marketing cookies in future, we will update this policy and obtain your consent through the cookie banner before any such cookie is set.


Similar technologies — pixels, local storage and scripts

In addition to cookies, our consent banner controls the firing of marketing and analytics scripts that can use technologies other than cookies. These include:

  • Tracking pixels embedded in third-party scripts (e.g. analytics or advertising).
  • Local storage and session storage used by scripts we load on the site, including the Elementor page builder.
  • Server-side tagging, where applicable, configured to respect the choices made in the consent banner.

Where these technologies serve a purpose equivalent to a cookie of a given category, they are treated as that category for consent purposes. We do not use device fingerprinting.


How we obtain consent

When you first visit revmai.com you will see a consent banner. The banner:

  • Tells you that we use cookies and similar technologies, and what for.
  • Distinguishes cookies that are exempt from consent (always on) from cookies that require your consent.
  • Lets you accept, reject, or set granular preferences (functional, analytics, marketing) before any non-exempt cookie is set.
  • Makes “Reject all” as easy as “Accept all” — you do not have to opt out per category one at a time.
  • Records your choice in a way we can demonstrate to a regulator if asked.

We do not pre-tick any non-essential category. We do not treat continued browsing, scrolling, or closing the banner as consent. Consent is a freely given, specific, informed and unambiguous indication of your wishes (UK GDPR Art. 4(11)).

If, in future, we rely on the statistical purposes or appearance exceptions for any technology, we will still give you clear information about that use in this policy and provide a simple and free way to object — both of which are legal conditions of those exceptions.


How to change your preferences or withdraw consent

You can change your cookie preferences at any time:

  • On the website. Click the “Cookie preferences” link in the website footer (or the cookie icon in the bottom-left of the page) to re-open the preference centre at any time. Changes apply immediately on subsequent page loads.
  • In your browser. You can also delete or block cookies through your browser settings. Each major browser explains how to do this:
  • Google Chrome — Settings → Privacy and security → Cookies and other site data.
  • Apple Safari — Settings → Privacy.
  • Mozilla Firefox — Settings → Privacy & Security.
  • Microsoft Edge — Settings → Cookies and site permissions.

Withdrawing consent does not affect the lawfulness of any processing that took place before withdrawal. Where we rely on a PECR exception rather than consent, the same preference centre gives you a simple and free way to object.


International transfers

Some of the third parties listed in this policy (notably Google) process data outside the United Kingdom, including in the United States. Where this happens, transfers are made under appropriate safeguards under Articles 44–49 UK GDPR — typically:

  • The UK Extension to the EU-US Data Privacy Framework, where the recipient is certified.
  • The UK International Data Transfer Agreement (IDTA), or the Addendum to the EU Standard Contractual Clauses.

Each transfer is supported by a Transfer Risk Assessment, in line with ICO guidance.


Personal data and your rights

Where the cookies described in this policy collect data that constitutes personal data (for example, an online identifier under Article 4(1) UK GDPR), we process that data as a controller under one of the following lawful bases:

  • Consent (Art. 6(1)(a)) — for analytics and marketing cookies and any other non-essential cookie.
  • Legitimate interests (Art. 6(1)(f)) — for the minimum strictly-necessary cookies needed for the website to operate securely (e.g. anti-CSRF tokens, bot mitigation). The relevant legitimate interest is operating and securing the website. Our balancing assessment is set out in the Revmai Legitimate Interests Policy and LIA.

You have the right of access, rectification, erasure, restriction, objection, and data portability in respect of personal data we hold about you, where the relevant UK GDPR right applies. See the Privacy Policy for how to exercise these rights.


Children

Revmai’s website is aimed at business users. We do not knowingly target children, and the cookies described in this policy are not used to profile children. If you believe a child has used the site, contact us at privacy@revmai.com and we will delete any personal data we hold.


Updates to this policy

We may update this Cookie Policy from time to time — for example, when we add or remove a cookie, change a provider, or in response to new legislation or regulator guidance (as we have done in this version following the Data (Use and Access) Act 2025). The “Last updated” date at the top of this policy will reflect the most recent change. Where the change is material (for example, the introduction of a new category of cookie), we will re-prompt for consent through the cookie banner.


How to contact us

If you have a question or complaint about how Revmai uses cookies on revmai.com, please contact us using the details below. Revmai has not appointed a statutory Data Privacy Lead, as we are not required to do so under Article 37 UK GDPR; day-to-day responsibility for data protection sits with our Privacy Lead. privacy@revmai.com is our single point of contact for all privacy, data protection and cookie matters:

Revmai Ltd

A company registered in England and Wales with company number 16515498.


Privacy Lead:

Nick Dixon

Post:

Revmai Ltd, 30 The Causeway, Chatham, ME4 3SR, United Kingdom

If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner’s Office (ICO):

Regulator

Information Commissioner’s Office (ICO)

Post:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Ready to Accelerate?

Give Your TeamMore Time to Sell

From first contact to signed contract — with less friction, more intelligence, and real human support.