Cookie Policy

1. What Are Cookies?

Cookies are small text files that are placed on your computer, tablet, or mobile device when you visit a website or use a web-based application. They are widely used to make websites and applications work efficiently, to remember your preferences, and to provide information to the owners of those sites and applications.

Cookies are not programmes and cannot carry viruses or malware. They cannot access other files on your device. A cookie is simply a data file that your browser stores and sends back to the originating server when you make subsequent requests.

In addition to traditional cookies, we and our service providers may use similar tracking technologies, including:

Local storage objects: data stored directly in your browser that persists beyond the current session;
Session storage: temporary data held only for the duration of your browser session;
Pixel tags (also known as web beacons): tiny invisible images embedded in web pages or emails that allow a server to record that a page or email has been viewed; and
Device fingerprinting: collection of technical device attributes to identify a device across sessions, used only for security and fraud prevention purposes.

References to “cookies” in this Policy include all of the above technologies unless the context requires otherwise.

For the purposes of this Policy, AccoDrop is a trading name operated by Meatwala Group Ltd, a private limited company registered in England and Wales under company number 15260965, whose registered office is 6 Shelburne Court, High Wycombe, England, HP12 3NH.

2. Legal Framework

Our use of cookies is governed by the Privacy and Electronic Communications (EC Directive) Regulations 2003 (as amended), commonly referred to as PECR, and the UK General Data Protection Regulation (UK GDPR). We comply with the guidance issued by the Information Commissioner’s Office (ICO) on the use of cookies and similar technologies.

Under PECR, we are required to:

tell you which cookies we use and why;
obtain your consent before placing any non-essential cookies on your device; and
make it as easy for you to withdraw consent as it was to give it.

Certain storage and access technologies may be used without consent where a statutory exception applies, including where they are strictly necessary to provide a service you have requested. Where no exception applies, we obtain the consent required by law before using the technology.

3. Categories of Cookies We Use

We categorise our cookies as follows. The tables in Section 4 provide specific details of each cookie we use.

3.1 Strictly Necessary Cookies

These cookies are essential for the operation of the AccoDrop platform and cannot be disabled. They are set in response to your actions, such as logging in, setting your privacy preferences, or filling in forms. Without these cookies, services you have requested cannot be provided.

We do not require your consent to use strictly necessary cookies. They are always active.

Examples of what strictly necessary cookies do on AccoDrop:

maintain your logged-in session so you do not need to re-authenticate on every page;
remember your cookie consent preferences;
protect the platform against cross-site request forgery (CSRF) attacks;
load balance requests across our server infrastructure; and
enable secure, encrypted communication between your browser and our servers.

3.2 Functional Cookies

Functional cookies enable enhanced features and personalisation. Depending on their precise purpose, some may require consent while others may fall within a statutory exception. Where consent is required, they are not set unless you have chosen to allow them.

Examples of what functional cookies do on AccoDrop:

remember your language or display preferences;
remember your last-visited dashboard section; and
store UI settings such as collapsed or expanded sidebar state.

3.3 Analytical Cookies

Analytical cookies allow us to understand how users interact with the website and platform so that we can measure and improve performance. Where analytical technologies require consent, they are not activated until you have chosen to allow them. We configure analytics to minimise the collection of identifying information where reasonably possible.

Examples of what analytical cookies do on AccoDrop:

count the number of unique visitors to each section of the platform;
measure the time spent on different sections;
identify error pages and broken user journeys; and
record which browser and device types are used to access the platform.

3.4 Marketing and Advertising Cookies

AccoDrop does not currently use marketing or advertising cookies on the platform itself. We do not display third-party advertising on AccoDrop. However, our public-facing marketing website at www.accodrop.co.uk may in future use marketing cookies to measure the effectiveness of our advertising campaigns and to show you relevant content. We will update this Policy before introducing any such cookies and will seek your consent at that time.

3.5 Security and Fraud Prevention Technologies

AccoDrop may collect and transmit technical information required for security, fraud prevention, and relevant HMRC API requests. Depending on the HMRC service used, this may include information such as IP address, connection information, browser or device information, and other technical parameters required by HMRC’s fraud prevention specification.

These items are not necessarily browser cookies. Where information must be collected or transmitted to meet an HMRC technical requirement or another legal obligation, that processing cannot be switched off while using the relevant HMRC-connected feature. Further information is contained in our Privacy Policy.

4. Specific Cookies Used by AccoDrop

The tables below describe cookies and similar technologies that may be used by the AccoDrop website and platform. The precise cookies set depend on the features and third-party services enabled at the time of your visit. Our cookie consent tool is configured to reflect the live website, and we review this Policy when our implementation changes.

4.1 Strictly Necessary Cookies

accodrop_session
Category: Strictly Necessary
Purpose: Maintains your authenticated session after login. Without this cookie you may need to log in again when moving between pages.
Duration: Session.

accodrop_csrf
Category: Strictly Necessary
Purpose: Helps protect against cross-site request forgery by validating relevant requests.
Duration: Session.

cookie_consent
Category: Strictly Necessary
Purpose: Stores your cookie consent choices so we can remember your preferences.
Duration: Up to 12 months.

lb_route
Category: Strictly Necessary
Purpose: Helps route requests consistently to the appropriate server infrastructure during a session.
Duration: Session.

accodrop_secure
Category: Strictly Necessary
Purpose: Supports account and session security and helps detect unauthorised session activity.
Duration: Session.

4.2 Functional Cookies

accodrop_prefs
Category: Functional
Purpose: Stores platform preferences which may include sidebar state, display density and last-visited section.
Duration: Up to 6 months.

accodrop_lang
Category: Functional
Purpose: Remembers your language or regional display preference.
Duration: Up to 12 months.

accodrop_ui
Category: Functional
Purpose: Stores interface settings which may include table widths, sorting preferences or other display settings.
Duration: Up to 6 months.

4.3 Analytical Cookies

Where Google Analytics is enabled and you have provided any consent required by law, the following cookies may be used:

**_ga**
Category: Analytical
Purpose: Used by Google Analytics to distinguish users and measure website usage.
Duration: Up to 2 years.

ga[ID]
Category: Analytical
Purpose: Used by Google Analytics to maintain and measure session information.
Duration: Up to 2 years.

**_gid**
Category: Analytical
Purpose: Used by certain Google Analytics configurations to distinguish users.
Duration: Up to 24 hours.

**_gat**
Category: Analytical
Purpose: Used by certain Google Analytics configurations to manage request rates.
Duration: Up to 1 minute.

If you reject analytical cookies, Google Analytics cookies will not be set. Where Google Analytics is enabled, we configure the service to minimise the collection of identifying information and do not intentionally send names, email addresses or account details to Google Analytics.

5. Third-Party Cookies

Some cookies or similar technologies may be provided by third-party services used by AccoDrop. Where those technologies are not strictly necessary or otherwise exempt, they are not activated until the required consent has been obtained. Third parties may also process information under their own privacy notices where they act as independent controllers.

5.1 Google Analytics

Where enabled, we use Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), to help us understand how users interact with the website or platform. Google Analytics may use cookies and similar technologies to collect information about use of the website or platform. Google Analytics is only activated where any consent required by law has been obtained. We configure analytics settings to reduce the collection of identifying information where reasonably possible.

Google’s use of analytics data is governed by Google’s Privacy Policy, available at policies.google.com/privacy. You may opt out of Google Analytics tracking across all websites by installing the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout.

5.2 Stripe

Our payment processing provider, Stripe, may use cookies and similar technologies in connection with subscription payments, authentication, security and fraud prevention. Some Stripe technologies may be necessary to provide a payment function you have requested. Any other technologies are handled in accordance with applicable consent requirements. Stripe’s privacy information is available at stripe.com/gb/privacy.

5.3 Firebase (Push Notifications)

Where you have opted in to receive push notifications through the AccoDrop mobile application, Google Firebase may use device tokens and identifiers to deliver those notifications. These identifiers are not traditional browser cookies but serve a similar purpose. Firebase’s practices are governed by Google’s Privacy Policy.

5.4 Future Third-Party Services

We may in future add further third-party services to the platform, including live chat tools, customer feedback tools, or additional analytics providers. We will update this Cookie Policy before introducing any such services and will seek your consent where required.

6. Your Cookie Choices and How to Control Cookies

6.1 Our Cookie Consent Tool

When you first visit the AccoDrop website or platform, our cookie consent tool allows you to accept or reject non-essential cookies and, where available, choose by category. Non-essential technologies that require consent remain disabled unless you choose to allow them. Your preference may be stored using a necessary consent record so we can remember your choice.

You can change or withdraw your cookie choices at any time by selecting the “Manage Cookies” control available on the website or within the platform settings. We aim to make withdrawing consent as easy as giving it.

6.2 Browser-Level Cookie Controls

Most web browsers allow you to control cookies through their settings. You can typically:

view the cookies that have been set on your device;
delete some or all cookies;
block cookies from specific websites; and
block all third-party cookies.

Instructions for managing cookies in the most common browsers are available at the following links:

Google Chrome: support.google.com/chrome/answer/95647
Mozilla Firefox: support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Microsoft Edge: support.microsoft.com/en-gb/help/4027947
Apple Safari: support.apple.com/en-gb/guide/safari/sfri11471
Opera: help.opera.com/en/latest/web-preferences/#cookies

Please note that if you use browser controls to block all cookies, including strictly necessary cookies, this will affect the functionality of the AccoDrop platform and you may not be able to log in or use the Services.

6.3 Mobile App

The AccoDrop mobile application does not generally use traditional browser cookies. It may use secure storage, local application storage, device identifiers and push-notification tokens to provide authentication, preferences, security and notifications. Storage and access rules can also apply to mobile applications, and we apply the relevant consent or statutory-exception rules where required. You can manage certain permissions through your device settings.

6.4 Opting Out of Analytics

In addition to the options above, you may opt out of Google Analytics tracking across all websites by installing the Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout.

6.5 Do Not Track

Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you do not wish to be tracked. There is currently no industry-wide standard for how websites should respond to DNT signals. AccoDrop does not currently alter its behaviour in response to DNT signals, but we will monitor regulatory developments in this area.

7. AccoDrop Mobile Application

The AccoDrop mobile application is built using Flutter and does not use traditional HTTP cookies. Instead, the app uses the following storage mechanisms:

Secure storage: your authentication token and account credentials are stored in your device’s secure enclave (iOS Keychain or Android Keystore) and are not accessible to other applications;
Local preferences: non-sensitive preferences such as display settings are stored in the app’s local storage; and
Push notification tokens: if you opt in to push notifications, a Firebase Cloud Messaging device token is registered with our servers. You can revoke this at any time through your device’s notification settings.

We do not use these mobile application technologies to serve third-party advertising. Where a third-party provider processes technical identifiers to provide a requested feature, this is described in our Privacy Policy.

8. How Long We Keep Cookie Data

Personal data collected through cookies or similar technologies is retained only for as long as reasonably necessary for the relevant purpose and in accordance with our Privacy Policy. Information that has been effectively anonymised so that it is no longer personal data may be retained for statistical or analytical purposes.

Individual cookie files are stored on your device for the durations specified in the cookie tables in Section 4. Session cookies are deleted automatically when you close your browser. Persistent cookies remain until they expire or until you delete them.

9. Updates to this Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or changes in our business practices. The effective date at the top of this document will be updated whenever we make changes.

We will notify you of material changes by displaying a prominent notice on the AccoDrop website or within the platform, and by resetting your cookie consent preferences where the change affects the categories of cookies we use, so that you have an opportunity to review and re-confirm your choices.

We encourage you to review this Cookie Policy periodically. Previous versions are available upon request by contacting us at privacy@accodrop.co.uk.

10. Contact Us

If you have any questions or concerns about our use of cookies or this Cookie Policy, please contact us:

Email: support@accodrop.co.uk

Website: www.accodrop.co.uk

Post:Please use the registered office address stated above.

You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk if you are concerned about how we use cookies or handle your personal data.

AccoDrop – Version 1.0 | Effective Date: 24 August 2026