Cookies Policy
Effective date: 01 October 2025
1. Overview
This Cookies Policy explains how Qepacko ("we", "us", "our") uses cookies and similar technologies (including localStorage, sessionStorage, pixels and SDKs) on qepacko.co.uk and related services (the "Service"). It complements our Privacy Policy.
By interacting with our cookie banner or the preferences centre, you can manage consent to non-essential cookies as described below.
Controller: NEEDRATE LIMITED (Company No. 15638427), Academy House, 11 Dunraven Place, Bridgend, Mid Glamorgan, United Kingdom, CF31 1JF.
Contact: info@qepacko.co.uk
Context: The Service provides PDF conversion tools (for example, PDF-to-Word and PDF-to-Excel) and token-based features, with payments available via Visa and Mastercard in GBP (£), EUR (€) and USD ($). Cookies support secure sessions, preferences, analytics and—if enabled—marketing/attribution.
2. What are cookies (and similar technologies)?
Cookies are small files placed on your device by a website. They help the site to:
- run essential functions (for example, login sessions, CSRF protection);
- remember preferences (for example, language, UI choices, currency);
- measure performance and reliability; and—where you consent—
- enable analytics and marketing/attribution.
Similar technologies (treated in a similar way for consent purposes) include: localStorage/sessionStorage keys, SDK identifiers, tracking pixels and device/browser identifiers.
3. Categories we use
We group cookies and similar technologies into the following categories:
- Necessary / Essential – required for core functionality (authentication, security, session management, load balancing, consent logging). These do not require consent.
- Functional – remember your choices (for example, language, theme, last viewed wallet/top-up options, or optional saved inputs for your last conversion settings).
- Performance / Analytics – help us understand how the Service is used, where errors occur and how fast pages load so we can improve reliability and usability. Depending on the tool and configuration, we rely either on your consent or, where appropriate, on our legitimate interests with strict privacy safeguards (for example, IP truncation, no cross-site tracking, aggregated reports).
- Marketing / Advertising – used only if you enable them; they support campaign attribution, remarketing and measuring the effectiveness of our advertising.
- Security / Anti-abuse – detect unusual activity, mitigate fraud, and help protect against bots and automated abuse.
We comply with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR) when placing and reading non-essential cookies.
4. Typical cookies & storage keys (examples)
Specific names, providers and lifetimes may change as we update the Service. The current, authoritative list appears in the Cookie Settings panel.
| Name (example) | Purpose | Category | Typical lifetime |
|---|---|---|---|
| session_id | Maintains authenticated session | Necessary | Session |
| csrf_token | CSRF protection | Necessary | Session |
| consent_state | Stores your banner/settings choices | Necessary / Functional | 6–12 months |
| ui_prefs | Language, theme, layout, currency | Functional | ~6 months |
| perf_metrics | Page performance and error diagnostics | Analytics | 1–3 months |
| campaign_src | UTM / campaign attribution | Marketing | 1–3 months |
| qepacko_wallet_hint | Remembers last wallet/top-up view (localStorage) | Functional | Until cleared |
| qepacko_conversion_prefs | Saves last used conversion options (localStorage) | Functional | Until cleared |
This table is illustrative only; please refer to the Cookie Settings panel for the most up-to-date information.
5. Consent and lawful basis
Essential cookies are strictly necessary for the operation and security of the Service and do not require your consent.
Non-essential cookies (Functional, Analytics, Marketing) are set only after you provide consent via the cookie banner or preferences centre, unless we use a tightly configured, privacy-preserving analytics setup that we rely on our legitimate interests for (for example, no cross-site tracking, truncated IP addresses, aggregated reporting).
Our lawful bases for processing data from cookies and similar technologies may therefore include performance of a contract (to run the Service), consent, and legitimate interests (for example, service improvement, security, fraud prevention). Details are provided in our Privacy Policy.
6. How we record and retain consent
When you save your cookie choices, we record:
- the consent categories you selected;
- a policy/version reference;
- the date and time of your choice;
- technical information such as IP address and user-agent (for evidential purposes).
We retain this consent record for at least 24 months and up to 6 years where necessary in case of disputes or regulatory enquiries, in line with our Privacy Policy and applicable data-protection law.
7. Third parties and international transfers
We may use third-party providers (for example, for payment processing, analytics, hosting/CDN, email delivery, and marketing/attribution) that set or read cookies or similar identifiers via the Service. Some of these providers may process personal data outside the UK/EEA.
Where such transfers occur, we implement appropriate safeguards, which may include:
- UK adequacy regulations;
- UK/EU Standard Contractual Clauses; and
- supplementary technical and organisational measures where appropriate.
A current list of third-party providers and the cookies they use is available in the Cookie Settings panel on our site.
8. Managing or withdrawing consent
Use the cookie banner when you first visit the site, or the Cookie Settings link in the footer, to accept, decline or customise non-essential cookie categories.
You can withdraw your consent at any time via Cookie Settings; your new choice will apply going forward and will not affect the lawfulness of processing carried out before withdrawal.
You can also clear cookies and site data via your browser settings or use private/incognito mode.
Please note: disabling or blocking certain cookies may affect the functionality of the Service (for example, you may be logged out, and some preferences may not persist between visits).
9. Do Not Track / Global Privacy Controls
If your browser sends Global Privacy Control (GPC) or similar signals, we will treat them as an opt-out from non-essential cookies where this is technically feasible and consistent with applicable law. However, technical limitations and differing standards may mean that not all signals can be honoured in all contexts.
10. Changes to this Policy
We may update this Cookies Policy from time to time (for example, when we add or change integrations, analytics tools or advertising partners). Material changes will be communicated via a prominent notice within the Service and/or by email to registered users.
The Effective date at the top of this Policy will always show the latest version. Changes operate prospectively and do not affect cookie usage prior to the update.
11. Contact
Questions about cookies or this Policy can be sent to:
Email: info@qepacko.co.uk
Postal address:
NEEDRATE LIMITED
Academy House
11 Dunraven Place
Bridgend, Mid Glamorgan
United Kingdom
CF31 1JF