Cookie Policy
How we use cookies and how you can manage them.
About this cookie policy
This Cookie Policy explains how Hummingbird Holistics (“we”, “us” and “our”) uses cookies and related browser technologies when you visit hummingbird-holistics.co.uk, browse treatments, make a booking, purchase products or vouchers, or use your account. It explains what cookies do, who may set them, how long they may last and the options available to you.
Last updated: 19 October 2026. This policy should be read alongside any applicable privacy notice and the privacy information supplied by third-party booking or payment services. We review cookie use as the website and its integrations change.
Cookies used by the website
Cookies are small text files placed on your device by a website or service. Similar technologies include local storage, session storage and other device identifiers. A first-party cookie is set by the website you are visiting; a third-party cookie comes from another domain, for example an embedded booking or payment provider. Session cookies generally expire when the browsing session ends, while persistent cookies remain until an expiry date or deletion.
We group cookies by function: strictly necessary (essential website operation and security), functional (remembering optional preferences), analytics (measuring usage) and advertising/marketing (tracking or advertising). The presence of a particular plugin or service does not necessarily mean all its possible cookies are active on every visit.
Inventory note: The names below are documented cookies associated with technologies confirmed on the site, not a forensic capture of every cookie on every browser, device or subpage. Some are only set after a specific interaction or login. Unknown third-party names are not presented as confirmed.
WooCommerce — basket and checkout
WooCommerce powers the online shop, shopping basket and checkout. Its basket/session cookies are normally necessary to fulfil a shopping request; without them, adding items or checking out may fail.
| Cookie / identifier | Provider | Purpose | Typical duration |
|---|---|---|---|
woocommerce_cart_hash | WooCommerce (first party) | Helps identify changes to the shopping basket. | Browser session |
woocommerce_items_in_cart | WooCommerce (first party) | Indicates whether items are held in the basket. | Browser session |
wp_woocommerce_session_* | WooCommerce (first party) | Associates a visitor with their basket and checkout session; the suffix is variable. | Typically 2 days |
woocommerce_recently_viewed (if used) | WooCommerce (first party) | Remembers recently viewed products on sites using this feature; not confirmed active here. | Browser session |
store_notice* (if used) | WooCommerce (first party) | Records dismissal of a store notice if that feature is enabled; not confirmed active here. | Browser session |
WordPress — login and preferences
WordPress uses certain cookies to authenticate account holders and protect administrative sessions. These are generally not set for visitors who simply read public pages.
| Cookie / identifier | Provider | Purpose | Typical duration |
|---|---|---|---|
wordpress_test_cookie | WordPress (first party) | Checks whether the browser accepts cookies, normally on login pages. | Browser session |
wordpress_logged_in_* | WordPress (first party) | Recognises signed-in users and maintains account sessions. | Session, or longer when Remember Me is selected |
wordpress_sec_* | WordPress (first party) | Supports secure WordPress authentication. | Session, or longer when Remember Me is selected |
wp-settings-* | WordPress (first party) | Stores some preferences for signed-in users, especially administrators. | Typically 1 year |
wp-settings-time-* | WordPress (first party) | Records when the corresponding settings preference was saved. | Typically 1 year |
wp_lang (if set) | WordPress (first party) | Remembers the language selected on the login interface. | Browser session |
Stripe — payment security
Stripe is integrated with WooCommerce to facilitate card payments. When payment forms or Stripe services load, Stripe may use cookies or identifiers for fraud prevention, security and payment processing. Their appearance varies by the payment method and integration.
| Cookie / identifier | Provider | Purpose | Typical duration |
|---|---|---|---|
__stripe_mid (where set) | Stripe | Fraud detection and recognition of a device during payment. | Typically 1 year |
__stripe_sid (where set) | Stripe | Short-lived session identifier supporting fraud prevention during payment. | Approximately 30 minutes |
| Other Stripe-domain cookies or storage | Stripe | May support authentication, payment flows and risk checks; names differ across payment experiences. | Varies by cookie and payment method |
Payment information and any cookies set directly on Stripe-controlled domains are subject to Stripe’s own practices. See Stripe’s Privacy Policy. Disabling cookies or embedded scripts may make card payments unavailable.
Cliniko — appointment booking
Online appointments are provided through an embedded Cliniko booking frame hosted at hummingbird-holistic-therapies.au1.cliniko.com. Loading or interacting with that frame may involve third-party cookies, local storage or session information that support booking progress, account security and service operation.
Important: Cliniko’s own data and cookie notices may apply to the booking interface; visit Cliniko’s privacy information for more detail.
If you disable cookies or external content, the booking frame may be blocked. If that happens, you may need to re-enable cookies to complete an appointment request.
Other storage and services
We use performance improvement and image optimisation services to improve performance. Depending on site features and settings, they may rely on browser storage or functional identifiers.
Social links on the site point to external platforms such as Facebook and Instagram. Merely following a normal link does not, by itself, prove that those platforms place cookies on this website; once you visit their own sites, their respective privacy and cookie policies apply.
Your choices
Use the “Disable cookies” button below to save a persistent preference in this browser. When that preference is active, the website’s custom opt-out script works to stop external scripts and embedded services from loading, restrict JavaScript cookie writes, and remove cookies accessible to the website. You can use the option to re-enable cookies later.
Consequences: Disabling cookies may stop appointments, checkout, account login, payment security checks and other services from operating properly. This is the intended trade-off when you choose to disable them.
Technical limitation: Website code cannot absolutely disable cookies across your entire browser. Cookies delivered in HTTP responses, HttpOnly cookies and cookies belonging to third-party domains are not all controlled by this script. To block all cookies, use your browser’s cookie and site-data settings in addition to the website control. Your preference is stored locally on the device/browser where you select it; it does not automatically transfer to other devices or browsers.
First-party and third-party cookies
Cookies that come from our own domain are known as first-party cookies. Those supplied by an integrated service on a different domain are third-party cookies. We do not control every technical choice made by independent providers, and some of their cookies may only appear after you click a booking link, sign in, begin checkout or use an embedded feature.
We do not assume that simply visiting this site gives consent to optional cookies. Where consent is required under UK rules, an appropriate opt-in must be obtained before the relevant storage or access takes place.
Why we use cookies and the information involved
Necessary cookies can hold a session identifier, basket reference, login state or security token. Functional cookies may store display preferences. Depending on the service, third-party identifiers may be associated with technical information such as device/browser characteristics, approximate location derived from an IP address, pages used, or an interaction with a payment or booking service.
A cookie usually does not contain your full personal details by itself, but a unique identifier can still be personal data where it can be linked to you. Personal information is handled under the applicable UK data protection laws, with further details covered in the relevant privacy notices.
Legal basis and consent
The Privacy and Electronic Communications Regulations (PECR), alongside applicable UK data protection law, govern the use of cookies and similar storage technologies. Cookies that are strictly necessary to provide a service you expressly request, or are used solely to carry a communication, may be exempt from the usual prior-consent requirement. Other cookies generally require valid consent, subject to the exemptions and rules applicable to the particular technology.
You should be given clear information about optional cookies and a genuine choice about their use. An opt-out button does not, by itself, demonstrate that any optional cookies were prevented from loading before you made a choice. The site’s technical configuration and third-party services should be reviewed regularly against current Information Commissioner’s Office guidance.
How long cookies stay on your device
A session cookie normally lasts until the browser session ends, although browsers may restore sessions. Persistent cookies stay until their expiry or until you remove them. The table above gives typical durations rather than a promise that every browser or integration uses precisely the same expiration period. Your browser settings may shorten these times, and third-party providers may update their practices.
Managing cookies in your browser
Most browsers allow you to inspect, block and delete cookies, restrict third-party cookies, and clear site data. Look for Privacy, Cookies or Site settings in your browser settings. You may also use a private browsing window, although that does not prevent all temporary cookie use during the session.
You can consult guidance for Google Chrome, Mozilla Firefox, Apple Safari or Microsoft Edge. Settings vary by version and device. Blocking everything can affect account access, booking systems, forms, shopping baskets and secure checkout.
Changes to this policy
We may update this policy when the website changes, when a service provider alters its technology or when legal guidance changes. If we introduce a new analytics, marketing, video or other third-party integration, we will need to review its cookies, their purposes, retention periods and consent requirements before describing the policy as complete. The date at the beginning of the policy identifies this version.
Contact
For questions about cookies or privacy, contact Hummingbird Holistics at katy@hummingbird-holistics.co.uk. Address: 5 Park Avenue, Knaresborough, North Yorkshire, HG5 9ES.
