This Cookie Policy applies to Northern Directory and explains how Data Menu Limited uses cookies and similar storage or access technologies.
It should be read together with our Privacy Policy, which explains how we process personal information more generally.
1. What is a cookie?
A cookie is a small piece of information stored on a browser, computer, telephone, tablet or other device when a website or online service is used.
Cookies can allow a website to recognise a browser, maintain a login session, remember a choice, protect a transaction or provide particular functionality.
Similar technologies can include:
- local storage;
- session storage;
- software development kits;
- tracking pixels;
- scripts and tags;
- device identifiers; and
- technologies that access information stored on a device.
In this policy, we use “cookies” as a general term for cookies and comparable storage or access technologies.
2. Who operates the website?
Northern Directory is operated by:
Data Menu Limited
Company number: 14497044
5A The Gardens
Broadcut
Fareham
Hampshire
PO16 8SS
United Kingdom
Email: corporate@datamenu.co.uk
3. The rules that apply
Our use of cookies is governed primarily by the Privacy and Electronic Communications Regulations and, where personal information is processed, the UK General Data Protection Regulation and Data Protection Act 2018.
Some cookies may be used without prior consent where a legal exception applies. This may include cookies that are:
- necessary to transmit a communication;
- strictly necessary to provide a service requested by the visitor;
- required for authentication or security;
- used to remember a choice made by the visitor;
- used solely for qualifying statistical purposes; or
- used to adapt permitted website appearance or functionality.
Where an applicable exception requires us to provide a simple means of objecting, we will provide an appropriate preference control.
Where no exception applies, we will seek the visitor’s consent before activating the relevant cookie or technology.
4. Cookies currently used
The exact cookies present will depend on the actions you take. For example, authentication cookies will not normally be present unless you sign in.
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
directory_session | Strictly necessary | Maintains a secure authenticated session after a user signs in and allows access to account and business-management features. | Session or up to 30 days, depending on the sign-in option |
regional_directory_csrf | Strictly necessary | May be used to protect forms and account actions against cross-site request forgery and similar security risks. | Session |
regional_directory_location | Regional functionality | Stores a signed, approximate Northern or Southern regional classification so that the site does not need to repeat the same approximate location check on every page. | Up to 7 days |
directory_location_preference | User preference | Remembers that a visitor chose to remain on the Northern or Southern directory after seeing a regional recommendation. | Up to 7 days |
directory_location_opt_out | Strictly necessary preference | Remembers that a visitor objected to approximate regional recommendations, preventing repeated location checks and prompts. | Up to 1 year |
directory_preview | Development only | Allows developers to preview the Northern or Southern version of the website while using localhost. This cookie is not intended to operate on the public websites. | Up to 7 days |
5. Authentication and security cookies
When account functionality is used, we may set secure cookies to:
- identify an authenticated session;
- prevent repeated sign-in prompts;
- maintain account permissions;
- protect sensitive account actions;
- prevent request forgery;
- detect suspicious behaviour; and
- protect business listings from unauthorised access.
Authentication cookies may be marked HTTP-only, meaning they are not ordinarily accessible through browser JavaScript.
They may also use Secure and SameSite controls and may contain a signed, encrypted or random session identifier.
These cookies are used only for account, authentication and security purposes. Blocking them may prevent you from signing in or using account-management features.
6. Regional location cookies
We may use approximate IP-based geolocation supplied through our hosting infrastructure to estimate whether a visitor appears to be in:
- Northern England;
- Southern England; or
- outside the United Kingdom.
This information is used to decide whether to recommend the Northern or Southern version of the directory.
The regional-location cookie stores a signed, broad regional result. It is not intended to store your complete IP address or precise latitude and longitude.
You remain free to browse either directory. The location result does not force a redirect.
You can disable approximate regional recommendations below. Doing so removes the saved regional classification and creates a necessary opt-out cookie so that your objection can be remembered.
7. Local development cookie
During development, localhost cannot represent two separate public domain names.
The directory_preview cookie allows an authorised developer using localhost to switch between the Northern and Southern presentation.
This cookie is intended only for local development and should not be used to profile visitors or operate on the public websites.
8. Stripe payment cookies
Payments are processed using Stripe. When you begin or complete a payment, Stripe may use cookies, local storage or comparable technologies for purposes including:
- payment security;
- fraud detection and prevention;
- transaction processing;
- authentication;
- remembering payment selections; and
- providing Stripe Link, where selected.
Stripe-hosted Checkout operates on infrastructure controlled by Stripe. The precise technologies and durations may therefore be determined by Stripe and can change independently of this website.
More information is available from Stripe:
9. Mapping and address services
We may use Mapbox to provide:
- business maps;
- address searches;
- geocoding;
- location suggestions; and
- geographic display functionality.
When a Mapbox-powered feature is loaded, Mapbox may receive technical information such as an IP address, browser details, map requests, coordinates or search queries.
We will configure third-party services in a privacy-conscious manner where appropriate. Any non-exempt storage or tracking functionality will be subject to the required controls.
10. Hosting and security providers
Our hosting, content-delivery, database, storage and security providers may process technical request information necessary to:
- deliver website pages;
- balance traffic;
- prevent abuse;
- identify malicious requests;
- maintain website availability; and
- investigate technical faults.
Where a cookie or comparable technology is strictly necessary for these purposes, it may operate without optional consent.
11. Analytics
The directory does not currently set behavioural analytics or cross-site tracking cookies.
We may use server-side request logs and aggregated operational information for security, reliability and service improvement.
If client-side analytics are introduced, we will assess whether they:
- qualify for the statistical-purpose exception;
- require a simple and free means of objecting; or
- require prior consent.
We will update this policy and the relevant website controls before using analytics for a materially different purpose.
12. Advertising and social tracking
We do not currently use cookies to:
- profile visitors for advertising;
- track visitors across unrelated websites;
- measure advertising conversions;
- retarget visitors on social networks; or
- build behavioural advertising audiences.
Advertising and cross-site tracking technologies will not be activated without the consent and controls required by applicable law.
13. Public business links
Listings may contain links to external websites, social media pages, booking platforms and other third-party services.
Following an external link may allow that third party to set its own cookies or use comparable technologies.
We do not control cookies set after you leave our website. You should review the third party’s own cookie and privacy information.
14. How to manage cookies
You can manage regional recommendation cookies using the controls provided in section 6.
Most browsers also allow you to:
- view stored cookies;
- delete particular cookies;
- block cookies from particular sites;
- block third-party cookies;
- clear cookies when the browser closes; or
- block all cookies.
Blocking all cookies may affect:
- account sign-in;
- business dashboards;
- checkout and payment functions;
- security controls;
- saved preferences; and
- regional directory recommendations.
15. HTTP-only cookies
Some cookies are marked HTTP-only for security reasons.
These cookies cannot ordinarily be read or removed by website JavaScript. They can still be deleted through browser settings or by using a server-side preference control provided by us.
16. Cookie duration
A session cookie normally expires when the relevant browser session ends.
A persistent cookie remains until its stated expiry date, until it is replaced or until you delete it.
We aim to use cookies only for as long as reasonably necessary for their stated purpose.
17. Changes to our cookies
The cookies and technologies used by the website may change as we:
- release account features;
- change authentication providers;
- introduce analytics;
- change payment services;
- add mapping or embedded content; or
- improve security and performance.
We will update this policy where a change materially affects the information visitors should receive or the choices they should be given.
Where fresh consent is legally required, the relevant technology will not be activated until that consent has been obtained.
18. Contact us
Questions or concerns about our use of cookies should be sent to:
Data Menu Limited
Operator of Northern Directory
Email: corporate@datamenu.co.uk
Use the following subject line:
19. Related documents
This policy should be read together with: