This notice explains how Finnovator Ltd uses cookies and similar technologies on finnovator.co.uk, the marketing homepage, and the signed-in Founder, Admin and CFO portals. It should be read with our Privacy Policy.
It is based on a scan of the live Cloud Run stack on 6 September 2026 (marketing, homepage, Founder console, Admin, CFO workspace). We do not run advertising pixels, Google Analytics, Mixpanel, Hotjar or similar tools.
What cookies are
A cookie is a small text file placed on your device when you visit a website. Similar technologies include local storage, session storage, pixels and software development kits. This notice covers all of them, and refers to them together as cookies.
Cookies may be set by us (first-party) or by a third party whose service we use (third-party). A session cookie is deleted when you close the browser; a persistent cookie remains for a set period or until you delete it. Most Finnovator session state is stored in first-party local storage or session storage, not HTTP cookies.
Your choices
We use strictly necessary storage without asking, because the site and portals cannot function without it. This is permitted by regulation 6(4) of the Privacy and Electronic Communications (EC Directive) Regulations 2003.
The only optional third-party cookies on the public site are those set by Calendly when you open Book a strategy call. You can accept or reject those from the cookie banner. Rejecting them does not block booking: the call page still opens on calendly.com in a new tab. You can change your choice at any time using Cookie settings in the banner, or by clearing site data in your browser.
Cookies and similar technologies we use
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| Strictly necessary — always active | |||
finnovator_user_access_token, finnovator_user_refresh_token, finnovator_user | Finnovator (first party, local storage) | Keeps you signed in to the Founder console (dev.console.finnovator.co.uk). | Until you sign out |
finnovator_admin_access_token, finnovator_admin_refresh_token, finnovator_admin_user | Finnovator (first party, local storage) | Keeps you signed in to the Admin portal (dev.admin.finnovator.co.uk). | Until you sign out |
finnovator_cfo_access_token, finnovator_cfo_refresh_token, finnovator_cfo_user | Finnovator (first party, local storage) | Keeps you signed in to the CFO workspace (dev.cfo.finnovator.co.uk). | Until you sign out |
finnovator_basic_onboarding_v1 | Finnovator (first party, session storage) | Holds Basic onboarding progress (plan, identity, ledger choice) so a refresh does not restart the wizard. | Browser session |
finnovator-assessment | Finnovator (first party, session storage) | Holds fundraise-readiness assessment answers until results are submitted. | Browser session |
finnovator_cookie_consent | Finnovator (first party, local storage) | Records your optional-cookie choice so we do not ask on every page. | 12 months |
cfo_kpi_priority_* | Finnovator (first party, local storage) | Remembers KPI pin order a CFO has set for a client on this device. | Until cleared |
Load-balancer cookie (if present, e.g. GCLB) | Google Cloud | May be set by Google Cloud Load Balancing to keep requests on a consistent backend. Application code does not set this. | Session |
| Functional — consent required | |||
| Calendly widget cookies (names controlled by Calendly) | Calendly LLC (third party) | Runs the Book a strategy call popup on the marketing site. Loaded only after you accept optional cookies and click Book a call. If you reject optional cookies, we open calendly.com in a new tab instead of embedding the widget. | Set by Calendly (typically session to 2 years) |
We do not currently set analytics or marketing cookies. There is no Google Analytics, advertising pixel, or session-replay tool on the portals. If we add any, this notice and the banner will be updated and we will ask for consent again.
Third-party requests that are not cookies
Public pages load web fonts from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). That is a third-party network request. Google Fonts as used here does not set a Finnovator cookie. You can block third-party content in your browser if you prefer system fonts.
Where a third-party provider sets a cookie, that provider processes the data under its own privacy terms and may be an independent controller of it. Where a provider is established outside the United Kingdom, transfers use an appropriate safeguard such as UK adequacy regulations or the UK Addendum to approved standard contractual clauses.
Providers are listed at finnovator.co.uk/subprocessors.
Managing cookies in your browser
You can also block or delete cookies and site data through your browser settings. Blocking strictly necessary storage will prevent sign-in and onboarding from working.
Browser controls apply per browser and per device.
Legal basis
We set strictly necessary cookies and equivalent storage in reliance on regulation 6(4) of PECR. We set Calendly cookies only with your consent under regulation 6(1) and (2), or we avoid setting them on our pages by opening Calendly in a new tab. Where a cookie also involves processing personal data, our lawful basis under the UK GDPR is consent for optional cookies and legitimate interests for strictly necessary storage, as set out in our Privacy Policy.
Changes to this notice
We may update this notice when the cookies we use change. The version and date are shown at the top of this page. Where a change materially affects how we use optional cookies, we will ask for your consent again.
Contact
Questions about this notice should be sent to privacy@finnovator.co.uk, or by post to Finnovator Ltd, 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE.
If you are not satisfied with our response you may complain to the Information Commissioner's Office at ico.org.uk, or by telephone on 0303 123 1113.