Cookie Policy

Last updated: 28 September 2026

This Cookie Policy explains the cookies and similar browser technologies currently used by WORKLYFE LTD.

1. Before you choose
Optional technology is off by default. Before a choice, WorkLyfe retains only security technology supplied by Cloudflare and does not load Klaviyo marketing technology, Google-hosted fonts or GoDaddy visitor-measurement scripts.

2. Cloudflare security cookie
Technology: __cf_bm.
Provider and recipient: Cloudflare, Inc.
Browser status: first-party cookie on the WorkLyfe domain; Cloudflare can process its encrypted value.
Purpose and data: bot-management security. Cloudflare documents bot-score information, time information and, where Anomaly Detection is enabled, a session identifier. It says the value does not correspond to a WorkLyfe user ID and is not used to track across sites or sessions.
Duration: 30 minutes after continuous inactivity.
Configuration: retained for the site’s Cloudflare bot protection. Cloudflare states that this cookie is necessary for Bot Management or Bot Fight Mode. WorkLyfe records that configuration as its security-exception evidence.

3. Consent preference record
Technology: first-party local-storage key cookieConsent.
Provider and recipient: WORKLYFE LTD only.
Purpose and data: remembers the consent version, whether Klaviyo marketing is allowed, the choice method, save time and expiry time.
Duration: 180 days, after which a new choice is requested. This record is replaced when choices change.

4. Optional Klaviyo marketing technology
Provider and recipients: Klaviyo, Inc.; requests use Klaviyo hosts including static.klaviyo.com, static-tracking.klaviyo.com, static-forms.klaviyo.com, a.klaviyo.com and fast.a.klaviyo.com.
Purpose and data: supports WorkLyfe forms, email-marketing functionality, page/form interaction measurement and associated browser identifiers.
Technology and duration: the first-party __kla_id cookie was observed with a 400-day lifetime; Klaviyo local-storage identifiers persist until removed or until consent expires, while klaviyoPagesVisitCountV2 is session storage and ends with the browser session.
Default: off. Klaviyo loads only after affirmative marketing consent. Rejecting or withdrawing consent stops future loading, clears the identified optional cookie/storage where technically possible and reloads the page to stop active optional requests.

5. Technologies removed or disabled
Remote Google Fonts requests have been replaced with self-hosted Inter and Mansalva files, so Google does not receive a font request from WorkLyfe visitors. GoDaddy/WSIMG visitor-measurement output and requests to csp.secureserver.net have been disabled pending exact provider evidence. The previously observed _tccl_visitor, _tccl_visit and _scc_session values are not treated as essential by WorkLyfe and are cleared where technically possible. A malformed worklyfe.co.ukhttps destination had no valid provider or purpose and is treated as a defect, not an approved technology.

6. Managing or withdrawing your choice
Use the persistent Cookie preferences button on the site. Accept All and Reject All are presented with equal prominence. You can reopen the control after accepting, rejecting or saving a custom choice. Browser controls can also remove stored data.

7. Contact
For cookie, privacy or rights enquiries, email hello@worklyfe.co.uk.

WORKLYFE LTD
Registered in England and Wales