Cookie Policy
Last updated: 11 August 2026
What this policy covers
Cookies are small text files placed on your device when you visit a website. This policy also covers the other ways information can be kept on your device (browser local storage and session storage), because we and our providers use those too, and the rules that apply to cookies apply to them equally.
Everything below is a list of what is actually set, checked in a browser rather than copied from a template.
Your choices
Essential items are always active. Everything else is off unless you turn it on, and you can change your mind at any time in section 6.
- Essential: always active
- Needed for the site to work — remembering your cookie choice, keeping you signed in to the client portal or admin area, and keeping those sessions secure. These are always active and cannot be turned off.
- Analytics: optional
- Help us understand which pages are useful and where people get stuck, so we can improve the site. We look at this in aggregate; we do not use it to identify you.
- Advertising: optional
- Let us measure whether someone who clicked one of our Google Ads went on to make an enquiry, and let Google tailor the ads you are shown. Declining this does not stop you seeing our ads — it stops them being personalised and stops us linking a click to an enquiry.
What we set, in detail
Essential (4 items)
| Name | Type | Set by | What it does | Expires |
|---|---|---|---|---|
mema-cookie-consent | Local storage | MEMA Consultants | Remembers the cookie choice you made, and when you made it, so you are not asked again on every page. | Until you clear it, or change your choice |
mema-cookie-consent | Cookie | MEMA Consultants | A copy of your cookie choice, kept as a cookie so that it survives browsers which automatically clear website storage. It holds only your choice and its date. | 12 months |
fca-chat-opened | Session storage | MEMA Consultants | Stops the FCA Explainer chat window opening by itself more than once while you are browsing. | Until you close the browser tab |
mema-fca-auth-checklist | Local storage | MEMA Consultants | Saves your own answers and notes in the FCA authorisation checklist tool so you can come back to them. Stored only in your browser — it is not sent to us. The tool's Reset button deletes it. | Until you clear it or reset the tool |
Analytics (3 items)
| Name | Type | Set by | What it does | Expires |
|---|---|---|---|---|
opa_session_id | Session storage | MEMA Consultants (endpoint hosted on Cloudflare Workers) | A random identifier that groups the pages you view into a single visit, for our own traffic statistics. It is not linked to your name or email, and we do not record your IP address. | Until you close the browser tab |
_ga.memaconsultants.com | Cookie | Google (Google Analytics 4) | Distinguishes one visitor from another so page views can be counted. | 400 days |
_ga_0N57EXEWPL.memaconsultants.com | Cookie | Google (Google Analytics 4) | Keeps track of the current visit for our Analytics property. The suffix identifies the data stream. | 400 days |
Advertising (9 items)
| Name | Type | Set by | What it does | Expires |
|---|---|---|---|---|
_uetsid.memaconsultants.com | Cookie | Microsoft Advertising (UET) | Groups your activity into a single visit so an enquiry can be linked back to the Microsoft ad you arrived through. Does not tell us who you are. | Not yet measured |
_uetvid.memaconsultants.com | Cookie | Microsoft Advertising (UET) | Recognises a returning device across visits so a Microsoft ad click and a later enquiry can be connected. | Not yet measured |
MUID.bing.com | Cookie | Microsoft | Microsoft's own device identifier, used for ad measurement across Bing and Microsoft sites.Set on Google's own domain, so we cannot delete this one for you. | Not yet measured |
_gcl_au.memaconsultants.com | Cookie | Google (Ads conversion linker) | Lets us see that someone who clicked one of our Google Ads later made an enquiry, without telling us who you are. | 90 days |
_gcl_aw.memaconsultants.com | Cookie | Google (Ads conversion linker) | Stores the Google Ads click identifier from the ad you arrived through, so a later enquiry can be attributed to it. Only set if you arrive from an ad. | 90 days |
_gcl_ls | Local storage | Google (Ads conversion linker) | Holds the same Google Ads click identifier in browser storage rather than a cookie. | Until you clear it |
GCL_AW_P.google.com, .doubleclick.net, .googleadservices.com | Cookie | Used by Google to measure ad conversions across its own domains.Set on Google's own domain, so we cannot delete this one for you. | 90 days | |
IDE.doubleclick.net | Cookie | Google (DoubleClick) | Used by Google to record which ads you have been shown and to measure and personalise advertising.Set on Google's own domain, so we cannot delete this one for you. | 390 days |
test_cookie.doubleclick.net | Cookie | Google (DoubleClick) | A momentary check of whether your browser accepts cookies at all.Set on Google's own domain, so we cannot delete this one for you. | Removed as soon as the check completes |
Only if you sign in
These apply to the client portal and staff admin area. They are not set for ordinary visitors to the public site.
| Name | Type | Set by | What it does | Expires |
|---|---|---|---|---|
admin-tokenmemaconsultants.com | Cookie | MEMA Consultants | Keeps a signed-in administrator authenticated. HttpOnly and, in production, Secure. | 7 days |
client-tokenmemaconsultants.com | Cookie | MEMA Consultants | Keeps a signed-in client portal user authenticated. HttpOnly. | 7 days |
portal-client-idmemaconsultants.com | Cookie | MEMA Consultants | Records which client workspace your portal session is scoped to. HttpOnly. | 30 days |
Some names vary: _ga_0N57EXEWPL carries the identifier of our Google Analytics data stream, and _gcl_aw is only set if you arrive by clicking one of our Google Ads.
Measurement that stores nothing
One tool we use does not put anything on your device at all, so it does not need your consent. It still processes some information about your visit, which is covered in our Privacy Policy.
- Vercel Web Analytics (Vercel Inc.)
- Counts page views and traffic sources in aggregate. It sets nothing on your device; visitors are counted using a hash that Vercel derives server-side and rotates daily, so you cannot be recognised from one day to the next.Lawful basis: Legitimate interests (understanding how the site is used)
Third parties
- Google Analytics 4 (how the site is used) and Google Ads conversion tracking (whether an ad click led to an enquiry, and personalising the ads you see). Governed by the Google Privacy Policy.
- Vercel Inc.
- Hosts the site and provides the storage-free traffic measurement described in section 4.
- Cloudflare Inc.
- Hosts the endpoint that receives our own traffic statistics. Cloudflare processes the data on our instructions; we do not record your IP address in those statistics.
We use Google Consent Mode, so if you decline, Google's tags still load but are told not to store or read anything on your device. We verified this: a visitor who chooses “Essential Only” ends up with no cookies at all.
Contact
For questions about this policy, or to exercise your data protection rights, contact us at contact@memaconsultants.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Questions about this policy? Email contact@memaconsultants.com or call 0330 133 0811.