CE Physio
Cookie Policy
Last updated: 16 September 2026

1. About this policy

1.1 This policy explains how CE Physio uses cookies and similar technologies on our website at www.cephysio.com, on our sales and sign-up pages, in our members' portal at portal.cephysio.com and in our emails: which ones we use, what they do, how long they last and how you can control them.

1.2 CE Physio is the trading name of Chloe Evans, who is the controller of the personal data collected through these technologies. Our privacy policy, at https://cephysio.com/privacypolicy, explains how we handle personal data more generally, and the two should be read together. If you have any question about this policy, email [email protected].

2. What cookies are

2.1 A cookie is a small file of letters and numbers that a website puts on your device so it can recognise the device, remember things about your visit and, in some cases, build a picture of how you use the site or which advertising you have seen. Cookies may be first-party, set by us, or third-party, set by another organisation whose code runs on our site, and they may last only for your visit or stay on your device until they expire or you delete them.

2.2 We also use technologies that work in a similar way and which the law treats in the same way: local storage, which our website platform uses to remember your session and how you arrived at our site; pixels and tags, small pieces of code that tell us or a third party that you have visited a page, opened an email or taken an action; and a tag manager, which loads and controls the other pieces of code on the site. In this policy 'cookies' means all of these unless we say otherwise.

3. When we need your consent

3.1 Our use of cookies is governed by regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended by the Data (Use and Access) Act 2025. Where a cookie involves personal data, the UK GDPR and the Data Protection Act 2018 also apply.

3.2 We need your consent before placing a cookie on your device unless it falls within a limited set of exceptions. Those exceptions cover cookies that are strictly necessary to provide the service you have asked for, such as keeping you logged in or keeping the site secure; used only to collect statistical information about how our site is used so that we can improve it, where that information is used only by us; used only to adapt the appearance or functionality of the site to your preferences; or used to transmit a communication or enable emergency assistance.

3.3 The statistical and the appearance-and-functionality exceptions are deliberately narrow. They cover how a service is used, not who uses it: they do not cover linking what an identified visitor does to that visitor's own record, and they never cover anything advertising-related, including measuring how advertising performs. We therefore do not currently rely on them: apart from strictly necessary cookies, and measurement that stores nothing on your device, everything described in this policy is set only with your consent.

3.4 Cookies used for advertising, or which share information about you with a third party for that third party's own purposes, always need your consent, and we do not set them unless you have given it.

4. Your choices and how to change them

4.1 When you first visit our website you are shown a cookie banner. Strictly necessary cookies are always on, because the site will not work properly without them. For everything else you can accept or reject each category, and rejecting is as easy as accepting. Nothing that needs your consent is set until you have given it.

4.2 You can change your choices at any time by clicking 'Cookie settings' in the footer of any page, or by emailing [email protected]. Withdrawing consent is free and takes effect immediately, although it does not undo anything that happened while your consent was in place.

4.3 You can also control and delete cookies through your browser settings, usually under 'Privacy' or 'Cookies and site data'. There is clear independent guidance at www.aboutcookies.org and at www.ico.org.uk. If you block all cookies you will not be able to log in to the members' portal and some of our forms will not work.

5. The cookies and similar technologies we use

5.1 We group them into four categories. Strictly necessary cookies make the website, our forms and the portal work and keep them secure, and cannot be switched off. Functionality and analytics cookies remember your choices, record how you arrived at our site and tell us how the site is used so we can improve it; because ours link that information to your individual visit and, if you make an enquiry, to your contact record, we set them only with your consent. Advertising cookies let us measure how our advertising performs and are set only with your consent. Consent-free measurement is anything that stores nothing on your device and reports only aggregate information used by us.

5.2 Third parties occasionally change the names and lifespans of their cookies, so the list below may not always be complete. We review it regularly, and you can always check what is stored on your device using the tools in your browser.

5.3 Our payment pages are operated by our payment processor, and video embedded from a third-party platform may set its own cookies when you play it. Those cookies are set by the provider under its own policies, and we will ask for your consent before loading any embedded content that is not strictly necessary.

msgsndr_id
Provider: CE Physio, set through our website and CRM platform, HighLevel
Purpose: Identifies your browser so the pages you view and any form you complete are linked to the same visit and, if you make an enquiry, to your contact record, and so we can see how our website is used and where enquiries come from.
Category: Functionality and analytics. Set only if you consent.
Duration: Up to 1 year

HighLevel session and attribution storage: v2_history, v2_session_history, v2_contact_session, v3_first_session_event, v2_user_session_event, lastExternalReferrer, lastExternalReferrerTime
Provider: CE Physio, set through HighLevel (local storage)
Purpose: Records the pages you visit during a session and the website or advertisement you arrived from, so we can understand how the site is used and which pages lead to enquiries.
Category: Functionality and analytics. Set only if you consent.
Duration: Until you clear your browser's site data

_fbp, set by the Meta pixel (identifier 1235491638488713)
Provider: Meta Platforms Ireland Limited
Purpose: Reports to Meta that you have visited a page or taken an action such as submitting a sign-up form, so we can measure how our advertising on Facebook and Instagram performs and show relevant advertising to people who have visited our site.
Category: Advertising. Set only if you consent.
Duration: 3 months

Google Tag Manager container (GTM-W46RL2LN)
Provider: Google Ireland Limited
Purpose: Loads and manages the pieces of code that run on our website. The container itself stores nothing on your device and collects no personal data, so it falls outside the consent rules; it is listed here for transparency. The tags it loads are treated according to their own category, and no tag that needs consent fires until you have given it.
Category: Not applicable
Duration: Not applicable

__cf_bm, cf_clearance and the cookies set by Cloudflare Turnstile on our forms
Provider: Cloudflare, Inc.
Purpose: Distinguish human visitors from bots and record that a visitor has passed a security check, so our site and forms are protected from automated abuse and you are not repeatedly challenged.
Category: Strictly necessary.
Duration: 30 minutes to 1 year

Cloudflare Web Analytics beacon
Provider: Cloudflare, Inc.
Purpose: Measures page views and how quickly our pages load. It uses no cookies and stores no identifier on your device, and reports only aggregate information used by us, so it does not require consent.
Category: Consent-free measurement.
Duration: No storage on your device

Session and authentication cookies on portal.cephysio.com
Provider: CE Physio, set through HighLevel
Purpose: Keep you logged in to the members' portal, the client portal and the course platform, and keep your session secure.
Category: Strictly necessary.
Duration: Session, or until you log out

6. Email tracking

6.1 Our marketing emails contain a small, invisible tracking image, sometimes called a tracking pixel, which loads when you open the email. It tells us that the email was opened, and our email platform also records which links in it you click. This information is linked to your contact record, so we can see which topics interest you and send you more of what you read and less of what you ignore. The law treats this technology in the same way as cookies.

6.2 We use email tracking only in marketing emails you have signed up to receive: the sign-up wording through which you join our mailing list tells you about it, and you will not receive marketing emails from us at all unless you have subscribed or bought a service from us (see section 7 of our privacy policy at https://cephysio.com/privacypolicy).

6.3 You can stop email tracking at any time by unsubscribing from our marketing emails, using the link in any of them. You can also prevent tracking images from working by setting your email app not to load remote images automatically; most email apps have this option in their privacy settings.

7. Advertising and Meta

7.1 Where you consent to advertising cookies, information about your visit, including the pages you looked at and whether you signed up or bought something, is shared with Meta. Meta uses it to report to us on how our advertising performs and to help us reach people likely to be interested in our services, and also for its own purposes under its own privacy policy. For the collection and transmission of this data to Meta, we and Meta are joint controllers under Article 26 of the UK GDPR; for what Meta does with the data afterwards, Meta is an independent controller. The arrangement between us and Meta is set out in Meta's Business Tools terms and its Controller Addendum, published on Meta's website, which record the essence of who is responsible for what.

7.2 Meta is based outside the United Kingdom, so this involves an international transfer of your personal data. Section 9 of our privacy policy, at https://cephysio.com/privacypolicy, explains the safeguards we rely on.

7.3 You can manage how Meta uses information about you in the ad preferences section of your Facebook or Instagram settings, and opt out of interest-based advertising from participating companies at www.youronlinechoices.com. We do not use cookies to make automated decisions about you that have a legal or similarly significant effect.

8. Changes and contact

8.1 We keep this policy under review and update it when we add, remove or change the technologies we use. The date at the top shows when it was last updated.

8.2 If you have any question, or want to object to any of the technologies described here, contact Chloe Evans, CE Physio, Fit2Go, 65 Clumber Road, West Bridgford, Nottingham NG2 6DP, or email [email protected]. You also have the right to complain to the Information Commissioner's Office at www.ico.org.uk or on 0303 123 1113.