Legal
Cookie Policy
1. Introduction
This Cookie Policy explains how Haveaspot (“we”, “us”, “our”) uses cookies and similar tracking technologies across our digital presence. This includes our main booking platform (the “Platform”), our promotional website (about.haveaspot.com), our blog (blog.haveaspot.com), and our support portal (support.haveaspot.com).
This policy explains what these technologies are, why we use them, and your rights to control our use of them under UK data protection laws.
This policy should be read alongside our General Website Privacy Policy and, if you are using our booking services, our Haveaspot Platform Privacy Policy.
2. What Are Cookies?
Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website. They are widely used to make websites work securely, manage user sessions, and provide anonymous usage information to site owners.
3. How We Currently Use Cookies
At present, Haveaspot takes a privacy-first approach to how we operate our platform. We currently only use Strictly Necessary cookies.
These cookies are essential for our Platform to function securely and correctly. They allow you to log in to your account, manage your booking sessions, and protect against malicious activity. Because the site cannot function securely without them, these cannot be switched off, and UK law does not require us to obtain your prior consent to use them.
Our Privacy-Friendly Analytics
We want to understand how users navigate our sites so we can improve our services, but we want to do it while respecting your privacy. We use two analytics tools, neither of which uses cookies. Which one applies depends on where you are.
The booking Platform (Umami)
Analytics on our main booking Platform are powered by Umami. Umami is a privacy-focused analytics tool that does not use cookies to track you and does not collect or store any personal data that could identify you across the internet.
Our About, Blog and Support websites (our own tool)
On our marketing and information websites, about.haveaspot.com, blog.haveaspot.com and support.haveaspot.com, we use a small analytics tool of our own instead. It does not use a third-party analytics provider, and it lets us see which of our adverts bring visitors.
It does not use cookies and does not store anything on your device. There are no cookies, local storage or similar identifiers, which is why it does not need a consent banner. (The only exception is a small setting that our own team switches on in their own browsers so that their testing is left out of our figures. It is never set for visitors.)
When you view a page, your browser tells us:
- the page you viewed (its address and title) and the time;
- the website that sent you to us, if any (its name and page, never the full address);
- if you used a link with campaign tags (for example, from one of our adverts), the campaign details in that link;
- when you start filling in a form on our sites, and when you send it, which form it was, but never what you typed into it;
- when you click a link that takes you away from the page, where it was heading (for example the booking Platform or another of our sites), but not the full address; and
- your country, and the general type of device, browser and operating system you use.
How we recognise a visit without cookies. To tell visits apart, our server combines your IP address and browser details with a secret code that changes every day, and turns the result into a short scrambled code (a “hash”). We store that code, but not your IP address or your browser details. The daily secret is deleted after two days, so the code cannot be recreated afterwards. This means we cannot recognise you from one day to the next, and we do not link this information to your Haveaspot account or your bookings. The one exception is when you send us a form, described next.
When you send us a form. If you send us a contact, beta sign-up, demo or onboarding form, your browser passes our site the reference of your current visit along with the form (it is held in the page’s memory only, never stored on your device). We then keep a summary of that visit with your enquiry: the advert, email or website that brought you, the pages you viewed and the links you clicked. This helps us understand what people were looking for and reply helpfully. It is kept for as long as we keep your enquiry, and it is not done if your browser sends a Do Not Track or Global Privacy Control signal.
Links in our emails. Links to our own websites in emails we send carry the name of the campaign, so we can tell which email a visit came from. This tells us which email brought a visit, not who clicked it.
We keep this information for 14 months. We do not sell it or use it to build advertising profiles. If your browser sends a Do Not Track or Global Privacy Control signal, we do not record your visit at all.
Our lawful basis is our legitimate interest in understanding and improving our websites and measuring our advertising. Because your IP address is briefly used to create the scrambled code, we treat this as personal data under UK data protection law. If you would like to object, you can do so at any time by contacting us at support@haveaspot.com, or by using one of the browser signals above.
This tool is separate from the advertising cookies described in section 5, which we have not yet introduced, and it is not used on the booking Platform.
Live chat on our About and Support websites
When our team is available, a chat button appears on some of our websites. It only stores anything on your device if you start a chat: your browser then keeps a single random reference (a “chat reference”, in your browser’s local storage) so that refreshing the page or moving between pages does not lose your conversation. It is used only to continue that chat, it does not identify you across the internet, and it is removed when the chat ends. If you never start a chat, nothing is stored. This is necessary to provide the chat you asked for, so it does not need a consent banner.
When you start a chat, we ask for your name and email address and keep the conversation with them so that we can follow up, as described in our Privacy Policy.
4. The Specific Cookies We Use
Below is a detailed list of the specific strictly necessary cookies currently deployed across the Haveaspot domains:
| Cookie Name | Provider / Source | Purpose | Category | Typical Duration |
|---|---|---|---|---|
_session_id | Haveaspot (First-Party) | Maintains your secure session state, ensuring you stay logged in as you navigate the Platform. | Strictly Necessary | Up to 30 days |
XSRF-TOKEN | Haveaspot (First-Party) | A security token used to verify that requests made to the server are legitimate, protecting against Cross-Site Request Forgery (CSRF). | Strictly Necessary | Session |
Note: If you interact with specific third-party integrations on our support portal, such as a live chat widget, those specific tools may deploy their own necessary functional cookies.
5. Future Advertising and Your Choices
Future Deployment of Marketing Cookies
While we currently do not use non-essential advertising cookies, we plan to do so in the future to help promote Haveaspot and connect with more communities. Specifically, we plan to utilise:
- Google Ads (
_gcl_au): To measure the effectiveness of Google advertising campaigns. - Meta/Facebook (
_fbp): To deliver targeted Haveaspot ads to users on Meta platforms based on website activity.
Your Future Consent
We will not deploy these advertising cookies until we have introduced a dedicated Cookie Consent Banner to our website. When these features are launched, you will be presented with a banner allowing you to explicitly Accept or Reject these marketing cookies before they are placed on your device, ensuring you have full control over your data.
6. Browser Settings
Even though we only use essential cookies, most web browsers allow you to control cookies through their settings preferences. You can set your browser to refuse all cookies, or to alert you when cookies are being sent.
Please note: If you configure your browser to block Strictly Necessary cookies (like _session_id), core functions of the Haveaspot Platform (like logging into your account or booking a venue) will fail to work.
To find out more about how to manage cookies on popular browsers, you can visit:
For general information about cookies and how to disable them, please visit www.allaboutcookies.org.
7. Updates to This Policy
We may update this Cookie Policy periodically to reflect changes in our technology stack, particularly when we introduce our consent banner and advertising partners. The “Effective Date” at the top of this page indicates when the policy was last revised.
8. Contact Us
If you have any questions or concerns regarding our use of cookies, please contact us at: support@haveaspot.com