Cookies and Storage Draft
Kellridge Pty Ltd (ACN 703 624 202, ABN 39 703 624 202), a proprietary company incorporated in New South Wales, Australia — kellridge.com/cookies Version: Draft 0.1 — not yet approved or published (27 Oct 2026)
In short
- We do not use cookies, advertising or tracking pixels. Fonts are hosted on our own site.
- Every page loads HLD's bot-detection script from hldgroup.org. It records clicks and form activity (never what you type) so HLD Sentinel can protect the site from bots and attacks, and it is used for nothing else. It records nothing if your browser sends Do Not Track.
- We also store your own Accessibility menu choices, only after you choose a setting. They never leave your device.
- Because all of this is strictly necessary, we do not show a cookie banner.
What is stored
| Name | Type | What it holds | When it is set | How long | Who can read it |
|---|---|---|---|---|---|
kellridge-a11y |
Browser local storage (first-party) | Your accessibility settings, e.g. {"text":"lg","contrast":true} |
Only when you select an option in the Accessibility menu | Until you press Reset or clear your browser's site data | Only the code on kellridge.com, inside your browser. It is not sent to our servers or anyone else |
hlda.v1 |
Browser local storage (first-party, written by HLD's script) | A random visitor identifier, session details and events waiting to be sent. No name, email or anything you type | On your first page view, unless your browser sends Do Not Track | Until you clear your browser's site data [to confirm — HLD session and identifier lifetime] | HLD's script on kellridge.com, which sends the events to HLD Group |
Our hosting provider, Cloudflare, processes your IP address and request details to deliver the site and protect it from attacks. This does not store anything on your device. See our Privacy Notice. [to confirm — that no Cloudflare security or challenge cookie (e.g. __cf_bm, cf_clearance) is set with our configuration; if one is, list it here as strictly necessary for security]
How to remove it
- Open Accessibility in the site header and press Reset; or
- clear "site data" or "cookies and site data" for kellridge.com in your browser settings.
The site works fully without it. If your browser blocks local storage, the menu still works for the current page.
Why no consent banner is needed
The law in the EU (ePrivacy Directive 2002/58/EC, Article 5(3)) and the UK (PECR, regulation 6, as amended by the Data (Use and Access) Act 2025) requires consent before storing or reading information on a user's device, unless it is strictly necessary. These rules cover local storage as well as cookies. Both of our uses rely on that exemption:
- Accessibility choices are storage you explicitly request. They are set only after you choose a setting.
- Bot detection (the
hlda.v1identifier and interaction data) is used only to keep the site and its contact form secure. We do not use it for marketing, audience measurement or improving the site, and the optional collectors (scroll depth, heatmaps, performance and errors) are switched off.
Australia, NZ, US and Canada. These countries have no equivalent device-storage consent rule. Analytics data is personal information under their privacy laws, and our Privacy Notice explains how it is handled.
Recommendation for the developer
- Keep setting storage only on user action. The current code already does this.
- On Reset, call
localStorage.removeItem('kellridge-a11y')rather than saving the default values, so nothing is left on the device. - Add a link to this page in the Accessibility menu ("Saved on this device only — learn more").
Changes
We will update this page, and ask for consent where the law requires it, before introducing any new storage or tracking.