Legal
Cookie Policy
Last updated: 7 October 2026
This Cookie Policy explains how Flow Inc. Ltd("CreativeFlow", "we", "us") uses cookies and similar technologies on www.creativeflowstudio.co.uk (the "Site"). It should be read together with our Privacy Policy.
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as local storage and pixels. We refer to all of these as "cookies" in this policy.
2. Our consent approach
Under the UK Privacy and Electronic Communications Regulations (PECR), we may only set cookies that are not strictly necessary with your consent. Our consent banner is provided by Cookiebot. It blocks non-essential third-party scripts until you have made a choice.
We use Google Consent Mode v2. If you accept analytics cookies, Google Analytics sets its cookies. If you decline, no analytics cookies are set. Google then receives only cookieless, anonymous signals that a page was visited, which cannot be used to recognise you on a later visit.
Analytics runs on our public website only. It never runs inside the signed-in client platform, or on the sign-in and password reset pages.
We do not run any advertising or cross-site tracking cookies. If that changes we will update this policy and add the relevant category to the banner before any such cookie is set.
You can change or withdraw your consent at any time by clicking "Manage cookies" in the footer.
3. Categories of cookies we use
Strictly necessary (always on)
These are needed to run the Site and the client platform, so they do not need your consent and cannot be switched off. Most are only set when you sign in to the platform.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| cf-session | CreativeFlow | Keeps you signed in to the platform. It cannot be read by scripts on the page (httpOnly). | Up to 30 days |
| cf-csrf | CreativeFlow | Protects forms in the platform against cross-site request forgery. | Session |
| cf-challenge | CreativeFlow | Holds your place while you complete the two-factor sign-in step. | 5 minutes |
| cf-currency | CreativeFlow | Remembers the currency you chose for prices (USD or GBP). Only set when you use the currency switch. | 12 months |
| CookieConsent | Cookiebot (Usercentrics) | Stores your cookie choice. | 12 months |
Preferences stored in your browser
The platform also saves one preference in your browser's local storage. It is not a cookie, is never sent to us, and stays on your device.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| cf-sidebar-collapsed | CreativeFlow | Remembers whether you collapsed the platform sidebar. | Until you clear it |
Analytics (consent required)
These help us understand how visitors find and use the Site so we can improve it. They are set only with your consent (signal: analytics_storage), and only on our public website.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_<id> | Google Analytics 4 | Distinguishes visitors and sessions for traffic analytics. | Up to 2 years |
Marketing
We do not use marketing or advertising cookies on the Site. No advertising tags, pixels or remarketing tools are deployed. The ad_storage, ad_user_data and ad_personalizationconsent signals are still sent to Google as part of Consent Mode v2, and are set to "denied" unless you accept marketing cookies.
4. Third-party content we embed
Our contact page embeds a booking calendar provided by Calendly LLC. Because you can only reach that page by choosing to contact us, we treat the calendar as strictly necessary to provide the service you have asked for. It therefore loads without waiting for consent. It only loads on that page, and it is the only third party we treat this way.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| Calendly session and preference cookies | Calendly | Operates the booking calendar, remembers your time zone and prevents duplicate bookings. Set only on the contact page. | Session to 12 months |
Calendly sets these cookies under its own cookie and privacy policies. If you would rather not load it, you can email us at Support@creativeflowstudio.co.uk to arrange a call instead.
Inside the platform, opening a deliverable link from Figma, Google Drive or Canva may load a preview from that provider. The provider may set its own cookies, under its own policies.
We do not embed social media feeds, video players, chat widgets, maps or web fonts from Google. Our brand typeface is served by Adobe Fonts. It does not set cookies, but Adobe receives your IP address and browser details when a page loads.
5. Where your cookie data goes
Analytics data is processed by Google. Google Analytics 4 does not log or store full IP addresses, and we have turned off Google Signals, so we do not receive cross-device or demographic profiling data about you. We do not sell analytics data, and we do not share it with advertising networks.
6. Managing your preferences
You can manage cookies in the following ways:
- On this Site:click "Manage cookies" in the footer at any time to change or withdraw your consent.
- In your browser: most browsers let you block or delete cookies and local storage in their settings. Blocking strictly necessary cookies will stop you signing in to the platform.
Withdrawing consent stops further analytics cookies being set. It does not delete cookies already stored on your device, which you can clear through your browser settings.
7. International transfers
Some cookie providers, including Google, Calendly and Adobe, are based outside the United Kingdom. Where personal data is transferred internationally we rely on appropriate safeguards as described in our Privacy Policy.
8. Changes to this policy
We may update this Cookie Policy from time to time. The "Last updated" date at the top of the page indicates when it was last revised. Material changes will be highlighted on the Site.
9. Contact
Questions about this Cookie Policy should be sent to Support@creativeflowstudio.co.uk.