Cookie Policy

This Cookie Policy explains how HMA Solicitors ("we", "us" or "our") uses cookies and similar technologies when you visit our website at:

https://www.hmasolicitors.co.uk/

(the "Website").

We use cookies and similar technologies to operate and secure the Website and maintain private-preview access. The Website also loads external resources and hosting-supplied scripts. Section 5 identifies observed technologies and the limits of our verification.

This Cookie Policy should be read together with our Privacy Policy, which explains how we process personal information more generally.

HMA Solicitors is a law firm authorised and regulated by the Solicitors Regulation Authority.

SRA number: 487838

Address:

Telephone: 020 3167 4337

Email: info@hmasolicitors.co.uk

Our Website provides information about our legal services, including criminal law, regulatory law, licensing law, immigration law and employment law.

Cookies are small text files that are stored on your computer, smartphone, tablet or other device when you visit a website.

We also use the term "cookies" in this Policy to include, where applicable, similar technologies that store information on or access information from your device. These may include tracking pixels, web storage, scripts, tags and other technologies covered by applicable electronic-communications and data-protection legislation.

These technologies can be used for different purposes, including:

• enabling essential Website functions;
• maintaining Website security;
• remembering your preferences;
• understanding how visitors use the Website; and
• measuring and improving Website performance.

The categories below explain possible uses. They do not mean that every category is currently deployed. See section 5 for the observed inventory and section 6 for the current position on consent controls.

4.1 Strictly necessary cookies

These cookies or similar technologies are necessary for the Website to operate or for a service specifically requested by you to function.

They may be used for purposes such as:

• Website security;
• maintaining a session;
• remembering your cookie preferences; and
• providing essential Website functionality.

Where a cookie or similar technology falls within an applicable legal exemption, we may use it without obtaining consent.

We do not classify a cookie as strictly necessary merely because it is useful to us. Non-essential technologies will be treated as requiring consent where applicable.

4.2 Preference and functionality cookies

These technologies allow the Website to remember choices you make, such as certain preferences or settings.

Where consent is required, these technologies will only be activated after you have given your consent.

4.3 Analytics cookies

Analytics technologies may allow us to understand how visitors use our Website, including information such as which pages are visited and how visitors navigate the Website.

We may use this information to improve the content, usability and performance of our Website.

Where consent is required, analytics cookies and similar technologies will not be activated until you have given consent.

4.4 Marketing and advertising technologies

We may use marketing or advertising technologies to measure the effectiveness of our marketing or to provide relevant advertising.

Where consent is required, we will not use these technologies unless you have provided the necessary consent.

If we introduce marketing or advertising technologies in the future, we will update this Cookie Policy and our cookie-management mechanism as appropriate.

We reviewed the Website's code and checked cookies, browser storage and external requests on the published Website on 23 October 2026. The following cookies were observed on the Website's own domain. Cookie behaviour may vary by browser, security checks and future Website changes.

The hma-site-gate cookie is restricted to the Website, is marked Secure and HttpOnly, and uses SameSite=Lax. Deleting or blocking it prevents the Website from remembering unlocked preview access. The observed __cf_bm cookie was Secure and HttpOnly; __dpl was Secure but not HttpOnly.

Other technologies and external resources

The enquiry form itself does not set an additional cookie or save the enquiry in local or session storage. Form data is submitted to our server for email delivery. Password-attempt and enquiry limits use server-side IP-address records, not browser cookies. Email-domain validation and email delivery are described in our Privacy Policy rather than being browser-cookie functions.

No advertising cookies, advertising pixels or advertising tag manager were identified in the maintained Website code or observed during this check. Unused software components are not included as active cookies. This inventory records observed behaviour, not a guarantee that a third party or the hosting service will never change its technologies.

Necessary cookies used to provide requested password-protected access and applicable security functions may be used without consent where a legal exemption applies.

The Website displays a cookie information prompt with a link to this Policy. Selecting Got it dismisses that notice and stores an acknowledgement for 180 days; it does not give consent to analytics, advertising or recording, and does not switch those services on or off. There is currently no control to accept or reject optional categories. We do not treat browsing or continuing to use the Website as consent.

The SRA badge, external fonts and hosting-supplied analytics and event scripts currently load automatically. No cookies were observed from the badge or fonts during the check. The consent requirements for hosting analytics, any session recording and the __dpl cookie require further assessment and provider clarification. This Policy does not assert that these technologies are exempt from consent or that an implemented consent control exists.

If we introduce non-essential technologies that require consent, we must provide an appropriate consent mechanism and prevent those technologies from activating until the required consent is obtained. We will update this Policy to reflect any such changes.

You can select Cookie information at the top of any page to reopen the notice and read this Policy. There is no recorded optional-cookie consent to withdraw: dismissing the notice is an acknowledgement only. You can use your browser's privacy settings to inspect, block or delete cookies and site storage for this Website.

Clearing hma-cookie-notice makes the information prompt reappear. Deleting hma-site-gate removes remembered private-preview access, so you may need to enter the password again. Blocking necessary cookies may prevent password-protected access from working. The public enquiry form does not require you to unlock the Website.

Browsers may also allow you to block third-party cookies or external resources. Blocking external resources may affect the SRA badge or the appearance of fonts. Clearing cookies alone does not necessarily stop cookie-free network requests or telemetry.

If consent-based technologies are introduced, we will explain how to reject them and withdraw consent as easily as it is given. Withdrawing consent will not affect the lawfulness of earlier consent-based processing.

Current external resources include the Yoshki-hosted SRA badge, a Google-hosted script used by that badge, and Google Fonts. Cloudflare provides hosting security, and the Website hosting service supplies technical cookies, analytics and event/error telemetry scripts. The observed technologies are listed in section 5. Details of Cloudflare's security cookies are available in its cookie documentation.

Loading an external resource exposes normal request information, including your IP address and browser details, to its provider even if no cookie is set. Clicking the SRA badge takes you to an external verification service; that service's own privacy and cookie notices then apply.

Email-domain checks and delivery of enquiries and acknowledgement emails happen on the server. They do not embed an email-provider cookie in the enquiry form. Please see our Privacy Policy for the broader handling of enquiry information.

Third parties may process information under their own privacy policies. Our browser check cannot establish all of their server-side processing, retention periods or international-transfer arrangements. Where consent is legally required for a technology, an appropriate consent mechanism is needed before that technology is activated.

Cookies and similar technologies may involve the processing of personal information.

Where this occurs, we will process that information in accordance with applicable data-protection legislation, including the UK GDPR and Data Protection Act 2018, as applicable.

Our Privacy Policy provides further information about:

• the personal information we collect;
• the purposes for which we use it;
• our lawful bases for processing;
• information sharing;
• international transfers;
• retention;
• your rights; and
• how to contact us.

Some third-party technology providers may process information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take the steps required by applicable data-protection law to ensure that the transfer is lawful and that appropriate safeguards are in place.

Further information is available in our Privacy Policy.

Cookies may be either:

Session cookies — these normally expire when you close your browser.

Persistent cookies — these remain on your device for a specified period or until you delete them.

The configured or observed durations are listed in section 5: seven days for private-preview access, 30 minutes of continuous inactivity for __cf_bm and approximately 24 hours for the observed __dpl cookie. The hosting analytics script supports a session-id cookie with a 30-minute lifetime, although that cookie was not observed in our automated check. Browser session storage normally lasts for the tab session; resource-cache retention depends on your browser and the provider’s cache settings. Server-side telemetry retention has not been confirmed.

We aim to ensure that cookies and similar technologies are retained only for as long as reasonably necessary for their stated purposes.

We take appropriate technical and organisational measures designed to protect information processed through our Website.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Depending on the circumstances and subject to applicable legal exemptions, you may have rights concerning your personal information, including rights to:

• request access to your personal information;
• request correction of inaccurate information;
• request erasure;
• request restriction of processing;
• object to certain processing;
• request data portability; and
• withdraw consent where processing is based on consent.

Further information is available in our Privacy Policy.

If you have concerns about our use of cookies, similar technologies or your personal information, please contact us:

HMA Solicitors

Telephone: 020 3167 4337

Email: info@hmasolicitors.co.uk

We will consider and respond to your concerns in accordance with our applicable complaints procedures.

If your concern relates to data protection and you remain dissatisfied, you may also complain to the Information Commissioner's Office (ICO).

We may update this Cookie Policy from time to time to reflect:

• changes to the Website;
• changes to the cookies or similar technologies we use;
• changes to our service providers;
• changes in applicable law or regulatory guidance; or
• changes to our data-protection practices.

The latest version will be published on this page and the "Last updated" date will be amended accordingly.

If you have any questions about this Cookie Policy, please contact:

HMA Solicitors

Telephone: 020 3167 4337

Email: info@hmasolicitors.co.uk

SRA number: 487838