Cookies Policy
Last updated: 5 August 2026
itemit is operated by RedBite Solutions Ltd (“us”, “we”, or “our”). This Cookies Policy explains how we use cookies and similar technologies on the itemit website (itemit.com) and the itemit mobile and web applications (the “Service”), and the choices you have.
Please read it alongside our Privacy Policy, which explains how we handle personal data more generally, our Terms of Use and our Licence Agreement. Our Terms of Use state that this policy forms part of those terms. Where this policy uses a defined term such as “Personal Data” or “Usage Data”, it has the meaning given in the Privacy Policy.
What are cookies?
Cookies are small text files placed on your device when you visit a website. Similar technologies (such as pixels, tags, software development kits and local storage) work in comparable ways. We refer to all of them as “cookies” in this policy.
- Session cookies are deleted when you close your browser; persistent cookies stay until they expire or you delete them.
- First-party cookies are set by us; third-party cookies are set by other organisations whose services we use.
- Similar technologies. Local storage and session storage hold data in your browser without sending it with every request. Pixels and tags are small files or snippets that record that a page or an email has been opened. In mobile applications, software development kits (SDKs) perform comparable functions using device identifiers rather than browser cookies.
Your consent, and the law we rely on
In the United Kingdom, cookies are governed by the Privacy and Electronic Communications Regulations 2003 (“PECR”), read together with the UK General Data Protection Regulation (“UK GDPR”). Under those rules we may place cookies that are strictly necessary to provide a service you have asked for without your consent. For every other cookie we must obtain your consent first, and that consent must be freely given, specific, informed and given by a clear affirmative action.
When you first visit our website we show a cookie banner, with options to accept all, reject all or choose individual categories. We place non-essential cookies (functional, analytics and marketing) only after you have given your consent, with the exception described in “Cookies set before you make a choice” below. Where a cookie also involves the processing of Personal Data, our lawful basis is your consent for non-essential cookies, and our legitimate interests in operating and securing the Service for strictly necessary cookies.
You can accept all cookies, reject all non-essential cookies, or choose individual categories when the banner appears. You can change your choice afterwards through your browser settings: if you clear the cookies this site has set, our banner will appear again on your next visit and you can make a new choice. Withdrawing your consent does not affect the lawfulness of any processing carried out before you withdrew it.
Categories of cookies we use
Our cookie banner groups cookies into the following categories. “Strictly necessary” is always on and cannot be switched off; every other category is off until you turn it on.
- Strictly necessary (always on). Needed for the Service to function, for example signing you in, security, load balancing, and remembering your cookie choices. These do not require consent. The Privacy Policy describes the equivalent session, preference and security cookies used inside the Service.
- Functional and preferences. Remember choices you make (such as language or settings) to personalise your experience.
- Analytics and performance (measurement). Help us understand how the Service is used and how it performs, so we can improve it.
- Experience. Support in-product messaging, guidance and support conversations.
- Marketing and advertising. Help us measure and deliver advertising and understand campaign performance, including on third-party platforms.
Cookies set before you make a choice
We want to be straightforward about one exception. On our contact page, HubSpot loads with the enquiry form and sets its visitor cookies (hubspotutk and __hstc, each lasting six months, together with the short-lived __hssc and __hssrc) before you have answered the cookie banner. These support the enquiry form and let us see which pages an enquiry came from, which we use to understand how people reach us. They are not used to advertise to you. If you would prefer them not to be stored, you can block or delete them using your browser settings as described below. We keep this arrangement under review, and if you have any questions about it you can contact our Data Protection Officer using the details at the end of this policy.
Our support chat, provided by Intercom, works differently. Its three cookies (intercom-id, intercom-device-id and intercom-session, each followed by our workspace identifier) are set only when you open the chat, or when you have accepted marketing cookies at the banner. Opening the chat is your choice, and those cookies are what allow your conversation to continue across pages and visits.
Cookies we and our providers set
The table below lists the cookies observed on the itemit website. Cookie names set by third parties can change when a provider updates its own software.
| Cookie | Provider | Category | Purpose |
|---|---|---|---|
| c15t | itemit | Strictly necessary | Records your cookie choices so we do not ask again |
| intercom-id-* | Intercom | Experience and support | Identifies a visitor so a support conversation can continue |
| intercom-device-id-* | Intercom | Experience and support | Identifies the device used for support conversations |
| intercom-session-* | Intercom | Experience and support | Keeps a support session active |
| hubspotutk | HubSpot | Functional and marketing | Identifies a visitor to our contact form and customer relationship management |
| __hstc | HubSpot | Functional and marketing | Records visit information for HubSpot analytics |
| __hssc, __hssrc | HubSpot | Functional | Tracks the current session and whether the browser was restarted |
| _ga | Google Analytics | Analytics | Distinguishes visitors to measure site usage |
| _ga_* | Google Analytics | Analytics | Maintains session state for a specific property |
| _clck | Microsoft Clarity | Analytics | Retains a Clarity identifier for the browser |
| _clsk | Microsoft Clarity | Analytics | Groups a visit's page views into one recording |
| _dd_s | Datadog | Analytics and performance | Holds performance and error monitoring session state |
| _gcl_au | Google Ads | Marketing | Attributes a conversion to an advertisement |
| _uetsid | Microsoft Advertising | Marketing | Identifies a visit for advertising measurement |
| _uetvid | Microsoft Advertising | Marketing | Identifies a returning visitor for advertising measurement |
| __obref | OpenAI | Marketing | Records that a visit arrived from an OpenAI advertisement |
In addition to the cookies above, which are set on the itemit domain, the providers listed in the next section set cookies on their own domains when their services load. The principal ones are MUID, MR, SRM_B, ANONCHK, CLID and SM (Microsoft, for Clarity and advertising, lasting from a few minutes up to 13 months); bcookie, bscookie, lidc, li_sugr, UserMatchHistory and AnalyticsSyncHistory (LinkedIn, from one day up to 12 months); IDE and test_cookie (Google, for advertising measurement, up to 13 months); and short-lived security and load-balancing cookies such as __cf_bm and _cfuvid, which providers use to distinguish automated traffic and which typically last around 30 minutes.
Other storage we use
Not everything we store is a cookie. We also use your browser’s local and session storage for the following, all of it first-party, meaning it stays in your browser and is not readable by other websites.
| What | Where | Why | How long |
|---|---|---|---|
| c15t | Local storage | Your cookie choices, mirroring the cookie of the same name | Until you clear it |
| _itemit_mp_session | Session storage | A short-lived identifier that groups your page views into one visit for our own measurement | Until you close the tab, or 30 minutes of inactivity |
| Campaign values, such as utm_source, utm_medium, utm_campaign, utm_content, utm_term, and click identifiers such as gclid, msclkid, ad_id and fbclid | Local storage | Carries the campaign that brought you to us through to sign-up, so we can tell which marketing works. These are read from the web address you arrived on and stored when you arrive, before you answer the cookie banner. | Until you clear it |
Where you have consented to analytics, some page views are also sent to Google Analytics from our own server as well as from your browser, so that our reporting is not distorted by ad blockers. No additional information is collected by doing this.
Third parties that may set cookies
We use the following third-party services, which may set cookies or use similar technologies. Each links to that provider’s privacy information. The service providers we use are also listed in our Privacy Policy.
| Provider | Purpose | Category | Where | More info |
|---|---|---|---|---|
| Google Analytics (Google) | Website and product analytics | Analytics | Website | policies.google.com/privacy |
| Google Tag Manager (Google) | Loads and manages our tags | Functional and analytics | Website | policies.google.com/privacy |
| Google Ads (Google) | Advertising and remarketing | Marketing | Website | policies.google.com/privacy |
| Microsoft Clarity (Microsoft) | Product analytics and session replay | Analytics | Website | privacy.microsoft.com/privacystatement |
| Microsoft Advertising (Microsoft) | Advertising measurement | Marketing | Website | privacy.microsoft.com/privacystatement |
| LinkedIn (Microsoft) | Advertising measurement | Marketing | Website | linkedin.com/legal/privacy-policy |
| OpenAI | Advertising measurement | Marketing | Website | openai.com/policies/privacy-policy |
| Intercom | In-product messaging and support | Experience and support | Website and applications | intercom.com/legal/privacy |
| HubSpot | Customer relationship management, forms and marketing | Functional and marketing | Website (forms) | legal.hubspot.com/privacy-policy |
| Datadog | Performance and error monitoring | Analytics and performance | Website and applications | datadoghq.com/legal/privacy |
| Firebase (Google) | Application analytics and infrastructure | Analytics | Applications | policies.google.com/privacy |
| Mixpanel | Product analytics | Analytics | Applications | mixpanel.com/legal/privacy-policy |
Mobile applications and software development kits
Our mobile applications do not use browser cookies, but they do use software development kits that perform similar functions, for example recording application analytics, diagnosing errors and supporting in-product messaging. These may use device or advertising identifiers provided by your operating system rather than cookies.
You can control these identifiers in your device settings: on iOS, under Settings, Privacy and Security, Tracking; on Android, under Settings, Privacy, Ads. You can also reset or delete the advertising identifier on either platform.
How to manage or withdraw your consent
- Change or withdraw your choice. Clear the cookies this site has set, using your browser settings as described below. Our cookie banner will then appear again on your next visit, and you can accept or reject non-essential cookies afresh.
- Manage or delete cookies in your browser: Chrome, Firefox, Safari, Edge.
- Opt out of Google Analytics across all websites using Google’s opt-out browser add-on, and adjust Google advertising through Google My Ad Center.
- Blocking some cookies may affect how parts of the Service work. Strictly necessary cookies cannot be switched off without preventing the Service from functioning.
Do Not Track and Global Privacy Control
Some browsers can send a “Do Not Track” signal. There is no accepted industry standard for how it should be handled, and as stated in our Privacy Policy we do not respond to it. Use the choices on our cookie banner, or your browser’s cookie controls, instead: both give effect to your choice directly.
How long we keep cookie data
Individual cookie lifetimes are shown in the table above. Data derived from cookies is retained in line with the retention section of our Privacy Policy: we keep it only as long as necessary for the purposes described, after which it is deleted or aggregated so that it no longer identifies you.
International transfers
Some of the providers listed above are located outside the United Kingdom, so information collected through cookies may be transferred internationally. Where that happens we rely on the safeguards described in the Transfer of Data section of our Privacy Policy, such as standard contractual clauses or an adequacy decision. Our primary hosting is in Ireland.
Children
The Service is not directed at anyone under the age of 18, and we do not knowingly collect information from children, whether through cookies or otherwise. Please see the Children’s Privacy section of our Privacy Policy.
Changes to this policy
We may update this Cookies Policy from time to time, for example if we add or remove a provider. We will post any changes on this page and update the “Last updated” date above. Where a change materially affects how we use non-essential cookies, we will ask for your consent again.
Contact
If you have any questions about this policy, please see our Privacy Policy or contact us:
- Email: team@itemit.com · Phone: +44 (0)1223 421611
- Data Protection Officer: Dr Alex Wong (team@itemit.com)
- RedBite Solutions Ltd, Cambridge, CB4 0WS, UK. Registered with the Information Commissioner’s Office (ICO), reference ZA412207.
If you are not satisfied with how we have handled a cookie or privacy question, you have the right to complain to the ICO at ico.org.uk.
