Last updated
September 17, 2026

Cookie policy

1. What this Policy covers

1.1 This Cookie Policy explains the cookies and similar storage and access technologies we use on our Website, why we use them, and how you can control them.

1.2 "Cookies and similar technologies" means cookies, pixels and tracking images, software development kits, local and session storage, and any other technique that stores information on your device or reads information already stored there. We refer to them collectively as "cookies" in this Policy.

1.3 This Policy forms part of, and should be read with, our Privacy Policy, which explains who we are, how the two companies in our group share responsibility for your personal data, your rights, and how to contact us.

2. The categories we use

We group cookies into four categories. The consent banner lets you accept or reject each non-essential category separately.

Category
What it does
Consent position
Strictly necessary
Makes the Website work: page delivery, load balancing, security and abuse prevention, remembering your cookie choices, and making the enquiry and brief forms function.
No consent required in either the EEA or the UK. These cannot be switched off.
Functional / appearance
Remembers choices you make, such as language, and adjusts how the Website looks or behaves for you.
Consent required. A narrower appearance exception exists in the UK under Schedule A1 PECR, but we do not rely on it and ask every visitor for consent.
Statistics / analytics
Tells us how the Website is used — how many people visit, which pages they read, where they leave — so that we can improve it.
Consent required. A narrower statistical exception exists in the UK, but we do not rely on it and ask every visitor for consent.
Marketing / advertising
Measures our advertising campaigns, builds audiences and lets us show relevant ads on third-party platforms.
Consent required in both the EEA and the UK. No exemption applies.

3. Which cookies we use

3.1 The table below lists the cookies and similar technologies deployed on the Website.

The technologies below are those set on the Website. Only the Finsweet consent cookie is strictly necessary and always active. Analytics (Google Analytics 4) and marketing cookies (Google Ads, Meta Pixel and LinkedIn Insight Tag) are set only after you accept the relevant category; until then those tags are blocked. No form cookies are set, and the Cal booking widget loads only when you open it.

Name
Provider
Category
Purpose
Type / duration
fs-cc
Finsweet (first party)
Strictly necessary
Stores your cookie consent choice
First-party; 180 days
li_fat_id
LinkedIn Insight Tag (first party)
Marketing (after consent)
Links a visit to a LinkedIn member for conversion and retargeting
30 days
li_sugr
LinkedIn Insight Tag
Marketing (after consent)
Browser-derived identifier for measurement
90 days
bcookie
LinkedIn
Marketing (after consent)
Browser identifier across LinkedIn services
1 year
bscookie
LinkedIn
Marketing (after consent)
Secure browser identifier
1 year
UserMatchHistory
LinkedIn
Marketing (after consent)
Ad ID syncing and audience matching
30 days
AnalyticsSyncHistory
LinkedIn
Marketing (after consent)
Records sync time with the analytics cookie
30 days
lidc
LinkedIn
Marketing (after consent)
LinkedIn data centre routing
1 day
li_gc
LinkedIn
Marketing (consent storage)
Stores guest consent for non-essential LinkedIn cookies
6 months
_ga
Google Analytics 4 (first party)
Analytics (after consent)
Distinguishes users
2 years
_ga_<container-id>
Google Analytics 4 (first party)
Analytics (after consent)
Persists session state
2 years
_gcl_au
Google Ads / Conversion Linker (first party)
Marketing (after consent)
Stores ad-click information for conversion attribution
90 days
_fbp
Meta Pixel (first party)
Marketing (after consent)
Identifies the browser for ad delivery and measurement
90 days
_fbc
Meta Pixel (first party)
Marketing (after consent)
Stores the ad-click identifier for attribution
90 days
fr
Meta / Facebook (third party, .facebook.com)
Marketing (after consent)
Ad delivery and retargeting
90 days

3.2 Third-party cookies are set by the providers named above and are governed by their own privacy notices. Where a third party uses the data for its own purposes, it acts as a separate controller.

3.3 Embedded third-party content, such as an embedded form, booking widget or video player, can set cookies as soon as it loads. Where that content is not strictly necessary, we prevent it from loading until you consent.

4. Legal basis and how consent works

4.1 For strictly necessary cookies we rely on the exemption from consent in the applicable law, and on our legitimate interest in operating a secure and functioning website for any resulting processing of personal data.

4.2 For all other cookies we rely on your consent. We apply the same opt-in standard to every visitor, wherever they are, and do not rely on the narrower exceptions available under UK law.

4.3 Consent must be freely given, specific, informed and unambiguous, and given by a clear affirmative act. We do not treat continued browsing, scrolling or closing the banner as consent, and we do not use pre-ticked boxes.

4.4 Rejecting non-essential cookies is as easy as accepting them. The first layer of our banner presents "Accept all" and "Reject all" with equal prominence, alongside a link to granular settings.

4.5 You can withdraw or change your consent at any time through the "Cookie settings" link in the Website footer. Withdrawal takes effect immediately for future processing and does not affect the lawfulness of processing before withdrawal.

4.6 Your choice is stored on your own device in the consent cookie named in section 3, together with the categories you accepted, and is applied on every page you visit until it expires or you change it.

5. Managing cookies in your browser

5.1 You can also block or delete cookies through your browser settings. Every major browser provides these controls in its help pages.

5.2 Blocking strictly necessary cookies at browser level may stop parts of the Website working.

5.3 Browser settings are device-specific and browser-specific. If you use more than one browser or device, you will need to set your preferences on each.

5.4 We currently do not respond to browser "Do Not Track" signals, because no common standard for them has been agreed. If a legally recognised machine-readable signal is introduced, we will honour it and update this Policy.

6. Changes

We update this Policy when the technologies on the Website change. The version and date are shown at the top. We re-scan the Website for cookies at least every six months and after any significant change to the tag manager container.

7. Contact

Questions about this Policy can be sent to fintech@goodface.agency, or by post to Goodface company OÜ, Vesivärava tn 50-201, 10152 Tallinn, Estonia.