Cookie Policy

Forefront uses a small number of cookies and similar browser storage on this site. This page lists each item: who sets it, what it is for, how long it lasts, and how you control it. It describes the site as built and is updated whenever that storage changes.

How you control cookies

If you visit from the United Kingdom, the European Economic Area, Switzerland or another region where prior consent is required, you see a cookie notice on your first visit. Nothing optional is stored until you choose Accept all or make a selection under Preferences; Reject non-essential keeps only what the site needs to work. You can change your choice at any time from the Cookie preferences link in the footer of every page. Visitors in other regions are not asked for prior consent. Residents of California and other US states with a right to opt out of the sale or sharing of personal information can use the Do Not Sell or Share My Personal Information page linked in the footer. All of these choices are recorded and applied through Shopify's Customer Privacy controls, the only consent mechanism this site uses. Our Privacy Policy is the single policy of record for personal data.

Strictly necessary storage

• Shopify platform cookies (_shopify_essential, cart, cart_currency, localization, secure_customer_sig, keep_alive, _tracking_consent, _cmp_a) — set by Shopify, which hosts this site, to keep your cart, currency, region and your cookie choices working. They do not require consent. Lifetimes range from the browser session to one year. Shopify publishes the full list at shopify.com/legal/cookies.
• Registration draft (forefront:registration-draft, browser session storage) — kept by Forefront while you complete the registration form so that a declined payment or a back button never erases what you typed. It holds the fields you entered, stays in your browser only, and is cleared when the tab closes or the booking succeeds.
• Signup popup memory (ff:popup, browser local storage) — kept by Forefront after you close the email signup popup (so it stays away for seven days) or sign up through it (so it does not appear again in this browser). It holds two timestamps only, stays in your browser, is never sent anywhere and does not require consent; clearing site data removes it.

Analytics storage (first-party; only with your consent where consent is required)

• ff_anon (cookie, up to 400 days; mirrored in browser local storage as ff:anon) — a random identifier created by Forefront so that we can understand how visitors reach and use this site: which campaign, search or referral brought them here and which pages they viewed before enquiring or registering. It contains no personal information and is never placed in a web address. It is created only when analytics are allowed under your cookie choice, and it is deleted if you withdraw that choice.
• ff:session (browser local storage, expires after 30 minutes without activity) — groups one visit's page views into a session and records how that visit began: the landing page, the referring site and any campaign parameters in the address. Same conditions as ff_anon.
• ff:queue (browser local storage, transient) — briefly holds an analytics event that could not be sent, and is emptied on the next page. Same conditions.
• Shopify analytics cookies (_shopify_y, one year; _shopify_s, 30 minutes) — set by Shopify for its own store analytics under the same consent choice.

Lifetimes above are the maximum the site requests. Browser privacy features (for example Safari's Intelligent Tracking Prevention, private browsing, or clearing site data) may shorten or remove any of this storage sooner; the site treats a missing item as a fresh visit and never reconstructs it.

Analytics events are sent to Forefront's own event service, operated for Forefront on Google Cloud, and are used to measure how people find and use Forefront and to improve the site. No third-party analytics service (for example Google Analytics) is installed on this site; the advertising measurement tags below load only with your consent.

Advertising storage (third-party services; only with your consent to marketing and, where it applies, to the sale or sharing of data)

Forefront advertises on Meta (Facebook and Instagram), Google and LinkedIn. Each service's measurement tag is loaded on this site only while your cookie choice allows marketing and, for visitors with a right to opt out of the sale or sharing of personal information, only while you have not opted out. If you never allow marketing, none of the storage below is created. If you withdraw your choice later, the tags stop and Forefront removes the first-party items below at once; items set on the services' own domains expire on their own schedule or can be cleared in your browser. The tags receive the page you are viewing and, for a registration or checkout, a Forefront event reference; they never receive your name or e-mail address from this site.

• Google Ads (_gcl_au, about 90 days; _gcl_aw and related _gcl_* items, about 90 days, only when you arrived from a Google ad) — set by Google's tag to attribute a later booking to a Google ad click. Requests go to googletagmanager.com, google.com and doubleclick.net.
• Meta (_fbp, 90 days; _fbc, 90 days, only when you arrived from a Meta ad) — set by Meta's pixel for the same purpose. Requests go to facebook.net and facebook.com.
• LinkedIn (li_fat_id, 30 days, only when you arrived from a LinkedIn ad; li_giant, 7 days) — set by LinkedIn's Insight Tag so that a later booking can be matched to a LinkedIn ad click. The tag's requests to linkedin.com and licdn.com also set LinkedIn's own cookies on LinkedIn's domain (bcookie one year, lidc one day, UserMatchHistory, AnalyticsSyncHistory and lms_ads 30 days, li_sugr and _guid 90 days, lang for the session); those are described in LinkedIn's cookie policy and are not under Forefront's control.

When a place is booked, Forefront may report that booking to the advertising service whose ad you clicked, using the ad click identifier above and the booking amount, so that advertising performance can be measured. This reporting uses only that identifier; it is not sent when you did not allow marketing at the time of the click or withdrew your choice afterwards.

Marketing and personalization

Beyond the advertising storage above, this site sets no marketing or personalization cookies. The cookie notice offers those categories because Shopify's controls cover them; if Forefront adds a service in either category, this page will be updated before it goes live.