What are cookies and similar technologies?
Cookies are small text files stored on your device when you visit a website. They allow the site to remember your actions and preferences across visits and pages. This policy also covers similar technologies — browser local storage, session storage and measurement scripts — which we treat in the same way as cookies.
This policy applies to www.wba-ablfinance.org, operated by WBA UK Holdings 1 Limited (trading as ABL Finance), company number 11948978, registered office Sedley Place, 361 Oxford Street, London W1C 2JL. It should be read together with our Privacy Policy.
How consent works on this site
When you first visit, a privacy panel offers three choices: Accept all, Reject all, or Settings, where you can switch Analytics and Advertising on or off separately. Until you choose, only the strictly necessary cookie described below is used: no analytics, advertising or error-monitoring code is loaded and no data is sent to Google, PostHog or Sentry.
If you accept a category, the related tools start on that page and on later visits for up to 182 days. If you reject a category, those tools never load and no information for that category is collected, stored or kept for later. You can change or withdraw your choice at any time using the Cookie settings link in the footer of every page.
When you withdraw consent for a category, we stop the related tools, delete the first-party cookies they set (_ga, _gcl_, ph_), clear the related browser storage and reload the page so that your new choice applies from a clean start. Information already received by Google, PostHog or Sentry before you withdrew is kept and deleted according to the retention periods described below.
Strictly necessary
abl_consent (first-party cookie, 182 days): records your privacy choices — which categories you allowed, when, and which version of this policy you saw. It is required to honour your choices and does not need your consent. If you delete or block it, the privacy panel is shown again on your next visit.
Our website, contact form, partner onboarding and client-intake forms work fully whatever you choose. Information you enter in a form is processed to handle your enquiry, as described in our Privacy Policy. Separately, if a technical fault occurs while you are using the site and you have consented to analytics, our error-monitoring tool receives diagnostic information about the fault as described under Analytics below.
Analytics (optional — only with your consent)
Google Analytics 4, provided by Google LLC (United States): measures how visitors use the site — pages viewed, time on page, how you arrived, device and browser type, and approximate location derived from your IP address (Google states that Google Analytics 4 does not log or store IP addresses). Cookies: _ga and _ga_0L04649ENV (first-party, up to 2 years). Google Analytics keeps event-level data for 14 months. Each time you visit again, the retention period for your browser’s analytics identifier starts again. Aggregated reports may be kept longer.
PostHog product analytics, provided by PostHog, Inc. (United States; our project uses PostHog’s US cloud): records page views and web-performance measurements (Core Web Vitals) together with a random browser identifier, a session identifier, the page address, the referring page, and device and browser type. We do not link PostHog data to your name or contact details, and PostHog’s automatic click tracking is switched off for this site. We ask PostHog not to derive your approximate location from your IP address for these analytics events; PostHog still receives your IP address as part of each web request, and whether it is stored is governed by our PostHog project settings. Storage: a cookie and browser local storage beginning ph_ (first-party, up to 1 year). PostHog retains this data for the retention period that applies to our PostHog plan.
PostHog session replay and surveys are switched off in our website code for this release: the website instructs PostHog not to record session replays (including browser-console messages) and not to show surveys, and this instruction takes precedence over our PostHog account settings. Any replays recorded before this change remain subject to the retention period that applies to our PostHog plan. If we enable either feature in future we will update this policy first.
Sentry error monitoring, provided by Functional Software, Inc. (trading as Sentry; data stored in the United States): when a technical error occurs in your browser on our site, Sentry receives the error message and code location, the page address, the time, your browser and operating-system type, and a short trail of recent page actions (such as page navigations and the addresses of web requests made by the site) so that we can diagnose the fault. Sentry sets no cookies. We have set Sentry not to store IP addresses and to apply its data-scrubbing filters, which remove common sensitive values from error reports; our Sentry software is also configured not to send a user identity with error reports. Errors that happen before you consent, or after you withdraw consent, are never reported — even if you consent later. Sentry performance tracing and session replay are not used. Error reports are kept by Sentry for 30 days.
Advertising (optional — only with your consent)
Google Ads conversion measurement and remarketing, provided by Google LLC (United States): measures whether enquiries result from our own Google adverts and lets us show our own adverts to people who have visited this site. Cookies: _gcl_au (first-party, 90 days) and, when you arrive from one of our adverts, _gcl_aw or _gcl_gb (first-party, 90 days). Google may also set cookies on its own domains (such as google.com and doubleclick.net) when the advertising tag runs. We do not use social-media tracking pixels and we do not sell your data.
If you accept Analytics but not Advertising (or the reverse), only the accepted Google tag is loaded and initialised, and the Google tag is told through Google Consent Mode that the other category is denied.
International transfers
Google, PostHog and Sentry may process the data described above outside the United Kingdom, including in the United States: Sentry stores its data in the United States and our PostHog project uses PostHog’s US cloud. Transfers to Google take place under the data protection terms we have accepted with Google. Transfers to PostHog and Sentry take place under the data-processing terms we have accepted with each of those providers.
Managing your choices
Use the Accept all, Reject all or Settings buttons in the privacy panel shown on your first visit. You can change or withdraw your choices at any time with the Cookie settings link in the footer of every page. You can also delete or block cookies in your browser settings; blocking the abl_consent cookie means the panel is shown again on each visit. Google also offers a browser add-on to opt out of Google Analytics (tools.google.com/dlpage/gaoptout) and advertising controls at adssettings.google.com.
For questions about this policy, or to exercise your data-protection rights, contact info@abl-finance.org. You can also complain to the Information Commissioner’s Office at ico.org.uk. Our ICO registration number is C1940996.