Cookies Policy
How HeyEd uses cookies and similar technologies on our website, logged-in platform, and related online services.
- Document Version
- v1.1
- Effective Date
- 14 April 2025
- Last Updated
- 11 February 2026
- Governing Law
- England and Wales
PREAMBLE
About this policy
This Cookies Policy explains how Hey Tech Labs Ltd, company number 15972086, trading as "HeyEd" ("HeyEd", "we", "us", "our") uses cookies and similar technologies on our website, logged-in platform, and related online services.
Our use of cookies and similar technologies is governed by the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR") and, where personal data is involved, the UK GDPR and the Data Protection Act 2018.
This policy should be read alongside our Privacy Policy, Terms of Service, and, where we process personal data on behalf of a customer, our Data Processing Agreement ("DPA").
SECTION 01
What Cookies and Similar Technologies Are
Cookies are small text files placed on your device when you visit a website or use an online service. They can help a service remember your browser, keep you signed in, protect sessions, remember preferences, understand usage, or support third party features.
This policy also covers similar technologies that store information on, or access information from, your device. These may include:
- browser local storage and session storage;
- pixels and tracking tags;
- analytics scripts;
- session replay scripts;
- embedded third party tools;
- device, browser, or interaction identifiers.
SECTION 02
How We Use Cookies and Similar Technologies
We use cookies and similar technologies for the following purposes.
| Category | Purpose | Consent Position |
|---|---|---|
| Strictly necessary | Login, authentication, session management, security, fraud prevention, service routing, load balancing, account protection, and features needed to provide the service you request | Required for the website or platform to work and cannot be switched off through our cookie controls |
| Functional | Remembering preferences, user interface choices, theme settings, sidebar state, or similar convenience settings | Used where necessary for the selected feature or where permitted; otherwise controlled through cookie settings where available |
| Security and diagnostics | Error monitoring, crash diagnostics, abuse detection, audit support, and service reliability | Used where necessary for security or service operation; non-essential replay or analytics components are controlled separately where required |
| Analytics and performance | Understanding visits, journeys, feature use, usage trends, and service performance | Used only where we have a lawful basis and either consent or a valid exception applies |
| Session replay and UX analytics | Replaying or analysing user interactions, heatmaps, clicks, scrolling, and page behaviour to improve the service | Used only where appropriate notice, consent or other lawful basis, masking, suppression, and access controls are in place |
| Payment and booking tools | Supporting payments, checkout, fraud prevention, invoice handling, or demo booking through third party services | May be set by the relevant third party when you use those services |
We do not use cookies to sell personal data or for third party advertising.
SECTION 03
Strictly Necessary Cookies
Strictly necessary cookies and similar technologies are needed to provide the website or platform you ask to use. For example, they may keep you signed in, protect your session, route requests securely, remember a security state, or allow a selected platform function to work.
You can block these cookies using browser settings, but parts of the website or platform may stop working properly.
Examples include:
| Name or Provider | Purpose | Typical Duration |
|---|---|---|
HeyEd session cookie, such as heyed or an equivalent session cookie | Maintains logged-in platform sessions and authentication state | Session-based or up to the configured session timeout |
| HeyEd security and request cookies | Security, request handling, CSRF/session protection, and platform operation | Session-based or short-lived |
sidebar_state | Remembers whether the platform sidebar is open or collapsed | Up to 7 days |
| Browser local storage used by HeyEd | Stores selected preferences such as theme, temporary account-state messages, or local UI state | Until cleared, replaced, or no longer needed |
Cookie and storage names may change as we update the Services.
SECTION 04
Analytics, Performance, and Product Improvement
We may use analytics and performance tools to understand how visitors and users interact with our website and platform, improve user journeys, identify errors, and measure service performance.
Where analytics or performance technologies are not strictly necessary, we use them only where:
- you have given consent; or
- a specific legal exception applies and we provide clear information and a simple way to object; or
- the technology does not store or access information on your device in a way that requires cookie consent, and our use is otherwise lawful and proportionate.
Examples include:
| Provider or Technology | Purpose | Typical Duration |
|---|---|---|
| Google Analytics, where enabled | Website analytics and visitor measurement | Varies by configuration; commonly up to 2 years |
| HeyEd platform analytics | Aggregated product usage, feature adoption, performance, and reliability analysis | Varies by configuration and log retention |
| Sentry, where enabled | Error monitoring, diagnostics, performance monitoring, and replay/error context where configured | Varies by Sentry configuration and browser storage behaviour |
If Google Analytics or a similar analytics provider is enabled, we use it only through the relevant cookie preference controls unless a valid exception applies.
SECTION 05
Session Replay and UX Analytics
Session replay and UX analytics tools can collect information about how people interact with a page or platform area, such as clicks, scrolling, navigation, form interactions, browser information, device information, and page content visible to the tool.
HeyEd may use Hotjar and Sentry Replay where enabled. Where we use these tools, we configure masking, suppression, and access controls appropriate to the context. For example, text and input masking, media blocking, and suppression of sensitive document views may be used to reduce the risk of capturing confidential information.
Examples include:
| Provider or Technology | Purpose | Typical Duration |
|---|---|---|
| Hotjar, where enabled | UX analytics, heatmaps, session replay, and product improvement | Varies by plan and configuration |
| Sentry Replay, where enabled | Diagnostic replay around frontend errors and sampled sessions | Varies by configuration |
These tools are not used to monitor staff performance or make employment, safeguarding, disciplinary, suitability, or similarly significant decisions about individuals.
SECTION 06
Payments, Demo Booking, and Third Party Pages
If you use a payment, checkout, invoicing, customer portal, or demo booking feature, third party services may set their own cookies or similar technologies.
These may include:
| Provider | Purpose | Notes |
|---|---|---|
| Stripe | Payment processing, checkout, fraud prevention, billing portal, invoices, and payment security | Stripe may set cookies or similar technologies on Stripe-hosted pages or embedded payment flows |
| Calendly or another booking provider, where enabled | Demo booking, calendar availability, and meeting scheduling | The provider may set cookies when you use an embedded booking form or visit its pages |
These third party services are responsible for their own cookie and privacy notices where they act independently.
SECTION 07
Email Technologies
Transactional emails may contain security, delivery, or formatting technologies needed to send and render the email.
HeyEd uses Resend for transactional email delivery. Resend does not normally set website cookies simply because you visit the HeyEd website or platform. If email open tracking or click tracking is enabled in the future, emails may include tracking pixels or tracked links. We use those features only where lawful, proportionate, and described in the relevant privacy information.
We do not currently use Resend email open or click tracking.
SECTION 08
Consent and Preference Controls
Continuing to use our website or platform does not, by itself, count as consent to non-essential cookies or similar technologies.
We do not rely on these Terms, our Privacy Policy, or this Cookies Policy to obtain consent for non-essential cookies.
Where consent is required, we ask for it before setting or using non-essential cookies or similar technologies. Consent must be:
- freely given;
- specific;
- informed;
- unambiguous;
- given through a clear affirmative action;
- as easy to withdraw as it is to give.
Where cookie preference controls are available, you can use them at any time to accept, reject, or change non-essential cookie choices. Withdrawing consent is as straightforward as giving it. If cookie preference controls are not yet available in a particular area, you can use your browser settings (see Section 10) to block or delete cookies.
SECTION 09
Logged-In Platform Areas
The logged-in HeyEd platform uses strictly necessary cookies and storage for authentication, security, navigation, session management, and selected user interface features.
Analytics, product improvement, session replay, and UX tools in logged-in areas are used only where appropriate for a business platform handling confidential staff information. Where required, they are subject to notice, consent or another lawful basis, masking, suppression, minimisation, and restricted access.
Disabling strictly necessary cookies may prevent the logged-in platform from working correctly.
SECTION 10
Managing Cookies in Your Browser
Most browsers let you:
- view cookies stored on your device;
- delete cookies;
- block all cookies;
- block third party cookies;
- clear site data;
- manage privacy and tracking settings.
Browser controls may not distinguish between strictly necessary and non-essential cookies. If you block all cookies, parts of the website or platform may not work.
For more information, check the help pages for your browser.
SECTION 11
Changes to This Policy
We may update this Cookies Policy from time to time. The latest version will be published on our website with the "Last updated" date above.
If we make material changes, we will take reasonable steps to bring them to the attention of affected users or customers where required.
SECTION 12
Contact
For questions about this Cookies Policy, contact:
Hey Tech Labs Ltd
legal@heyed.co.uk
128 City Road, London, EC1V 2NX