Cookie Policy
WAW Profi website and accounting platform
- Version
- V8
- Effective
- 4 November 2026
- Last reviewed
- 8 November 2026
Key points. This summary is for convenience only; the full Cookie Policy prevails.
- We use only the technologies needed for the website and app to work, and a few small preferences, such as remembering that the intro has been shown.
- We do not currently use advertising or analytics cookies, so we do not show a cookie banner.
- If that changes, we will update this Policy and ask for your consent where the law requires it.
1.About this policy
1.1 Status. This Cookie Policy (the “Policy”) is issued by WAW Profi Limited (“WAWProfi”, “we”, “us”, “our”). It explains how we use cookies and similar technologies on https://wawprofi.com and the WAWProfi web application (together, the “Platform”), and in our emails.
1.2 Privacy Notice. This Policy should be read with our Privacy Notice, which explains how we use personal data, including personal data collected through the technologies described here.
1.3 Applicable law. This Policy reflects regulation 6 of, and Schedule A1 to, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), as amended by the Data (Use and Access) Act 2025 with effect from 5 February 2026, and the Information Commission’s guidance on the use of storage and access technologies.
2.Cookies and similar technologies
2.1 Meaning. Cookies are small text files placed on your device when you use a website or application. Similar technologies include local and session storage, tracking pixels (small images or code that report when a page or email is opened), software development kits (SDKs) in mobile applications, device fingerprinting and link decoration. In this Policy, “cookies” includes all of these.
2.2 First-party and third-party. First-party cookies are set by us. Third-party cookies are set by another organisation, such as a payment or analytics provider.
2.3 Session and persistent. Session cookies are deleted when you close your browser. Persistent cookies remain until they expire or you delete them.
3.When we ask for your consent
3.1 General rule. Under regulation 6 of PECR, we may store information on, or access information from, your device only with your consent, unless an exception in Schedule A1 to PECR applies.
3.2 Exceptions
| Exception | When it applies | Your choice |
|---|---|---|
| Transmission | The sole purpose is to carry out the transmission of a communication over a network | None needed |
| Strictly necessary | Necessary to provide a service you have requested, including to protect information you provide, maintain the security of your device, prevent or detect fraud or technical faults, authenticate you automatically, or record selections and information you enter | None needed |
| Statistics | The sole purpose is to collect statistics on how the Platform is used in order to improve it; the information is shared only with those helping us make improvements | You are told clearly and can object simply and free of charge |
| Appearance and functionality | The sole purpose is to adapt the appearance or functionality of our website to your preferences, or otherwise enhance them | You are told clearly and can object simply and free of charge |
| Emergency assistance | The sole purpose is to locate you to provide emergency assistance you have requested | Not used by WAWProfi |
3.3 How we apply the exceptions. We rely on the statistics and appearance exceptions only where that is the sole purpose of the technology. We do not use them for technologies that also serve advertising or allow a third party to use the information for its own purposes, and we keep them technically separate from advertising technologies. Advertising, retargeting, cross-site tracking and social media pixels always require your consent.
3.4 Standard of consent. Where we ask for consent, we do so in accordance with Article 7 of the UK GDPR. We give you clear and comprehensive information about the purpose before you decide; we ask for consent separately from other matters; boxes are never pre-ticked; you can refuse as easily as you can accept; you can withdraw consent at any time, as easily as you gave it; and we keep a record of your choice.
3.5 Visitors from the EU and EEA. For visitors from the European Union and the European Economic Area, local laws implementing Article 5(3) of the ePrivacy Directive apply. Those laws do not contain the UK statistics and appearance exceptions, so we ask for consent to all technologies that are not strictly necessary.
4.Categories and your choices
4.1 Categories
| Category | What it does | UK visitors | EU and EEA visitors |
|---|---|---|---|
| Strictly necessary | Signing in, keeping your session and device secure, fraud prevention, load balancing, remembering display preferences | Always on | Always on |
| Preferences | Remembering display choices such as language, theme and layout | On; you can clear it in your browser | Off unless you consent |
5.Technologies we use
5.1 Cookie list. The technologies we currently use are listed below, based on a check of our website and web application on 4 November 2026.
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| Sign-in cookies | WAWProfi (first party) | Strictly necessary | Keeps you signed in to the web application, and signs you out after a period of inactivity | Ends when you sign out or the session expires |
| Tax submission security cookies (hmrc_device_id, hmrc_fp) | WAWProfi | Strictly necessary | Set only inside the web application. Hold a device identifier and basic browser details that the UK tax authority's fraud prevention rules require to be sent with tax submissions | Device identifier: 400 days. Browser details: 24 hours |
| Trusted-device cookie (wawprofi_trusted_device) | WAWProfi | Strictly necessary | Remembers a trusted device for multi-factor authentication | As set in the application |
| Data region cookie (wawprofi_data_region) | WAWProfi | Strictly necessary | Sends your requests to the database where your account is held (United Kingdom or Ireland) | 1 year |
| Workspace and support session cookies | WAWProfi | Strictly necessary | Carry the session while you open a workspace, while an authorised accountant works in a client's workspace, or during a support visit you have agreed to | Ends when the session ends |
| Payment cookies | Stripe | Strictly necessary | Fraud prevention during payment | Set by Stripe |
| App settings and offline copy | WAWProfi | Strictly necessary | Browser storage inside the web application that keeps the settings you choose (such as theme and menu layout), tips you have dismissed, and a copy of your records so you can keep working when you lose your connection | Until you clear it |
| waw-intro-seen | WAWProfi | Preferences | Browser storage that remembers the intro has been shown | Until you clear it |
| waw-theme | WAWProfi | Preferences | Browser storage that remembers whether you chose the light or dark look | Until you clear it |
| wawprofi-visitor-country | WAWProfi | Preferences | Browser storage that remembers the country you picked on the website, so prices show in the matching currency and the website assistant speaks in a matching voice | Until you clear it |
| wawprofi-mic-nudge-dismissed | WAWProfi | Preferences | Browser storage that remembers you dismissed the microphone tip | Until you clear it |
6.Managing your choices
6.1 No cookie banner. We do not currently use technologies that need your consent, so we do not show a cookie banner. If we add any, we will ask for your consent first.
6.2 Browser controls. Most browsers let you block or delete cookies. Blocking strictly necessary cookies may stop the Platform working, for example by preventing you from signing in.
7.Emails
7.1 Tracking pixels in emails. Our marketing emails may contain pixels that tell us whether an email was opened and which links were clicked. We use them only with your consent. You can also block them by turning off automatic image loading in your email application.
7.2 Marketing emails. Under regulation 22 of PECR, we send marketing emails to individual subscribers, including sole traders and partnerships, only with their consent or, where they are existing customers, about our similar products and services, with the opportunity to opt out when their details were collected and in every message. Every marketing email identifies WAWProfi and includes a simple way to unsubscribe.
7.3 Service emails. Emails about your account, billing and security are not marketing and do not contain advertising tracking pixels.
8.Personal data
8.1 Lawful basis. Where personal data is collected through the technologies in this Policy, our lawful basis under the UK GDPR is legitimate interests for strictly necessary, statistics and preference technologies, and consent for advertising technologies and email tracking pixels. The Privacy Notice explains your rights, including your right to object.
9.Changes and contact
9.1 Changes. We will update this Policy when our use of cookies changes and publish the new “last updated” date. We will ask for fresh consent where a change affects technologies that require it.
9.2 Contact and complaints. Questions about this Policy: privacy@wawprofi.com, or write to WAWProfi at 174 Hammersmith Road, London, England, W6 7JP. To complain about our use of cookies, see clause 13 of the Privacy Notice. You may also contact the Information Commission (ICO) at ico.org.uk.