Cookie Policy
Last updated: 31 August 2026
This policy explains how the Ola Accountancy platform uses cookies and similar technologies. It should be read alongside our Privacy Notice.
Our approach
We use strictly necessary cookies - the ones required to sign you in and keep your session secure - and, only if you agree, Google Analytics to understand how our public pages are used. We do not use advertising or marketing cookies, we do not build advertising profiles, and we do not share data with ad networks.
Strictly necessary cookies do not require consent under the Privacy and Electronic Communications Regulations 2003. Analytics cookies do, so we ask before setting any: until you choose Accept analytics, no Google Analytics script is loaded and no analytics cookie is created. Choosing Essential only keeps it that way, and the site works exactly the same either way.
Analytics never runs while you are signed in. It is limited to our public pages - the home page, sign-up, this policy and our other legal pages. It is not present in the client portal or the staff application, so no page you visit about your own tax affairs is ever reported to Google.
To change your mind at any time, reopen your cookie choice - this clears any analytics cookies already set and asks again.
Cookies we set
| Name | Type | Purpose | Expiry |
|---|---|---|---|
oa-session |
Strictly necessary | Keeps you signed in to the platform. Contains a hashed, server-verified session token - never your password. First-party, HttpOnly and Secure. | 8 hours (or when you sign out) |
| HMRC OAuth cookies | Strictly necessary | Short-lived cookies set during HMRC agent authorisation to secure the OAuth handshake (set by HMRC's secure sign-in service). | End of the authorisation flow |
Browser storage
We also store a small amount of data in your browser's local storage. This is not a cookie and is never sent to third parties:
| Key | Purpose |
|---|---|
oa-cookie-consent |
Remembers that you have seen the cookie notice, so it is not shown on every visit. |
oa-paid-ack-… |
Remembers that you have seen a one-time payment confirmation in the client portal. |
oa-mtd-device |
A random device identifier included in HMRC's mandatory fraud-prevention headers when using Making Tax Digital features. Required by HMRC; not used for tracking. |
oa-client (session storage) |
Remembers which client record a staff member last had open. Cleared when the browser tab closes. |
Third-party services
We load fonts from Google Fonts, icons from Font Awesome, process card payments via Stripe, and - with your consent - measure use of our public pages with Google Analytics (Google Ireland Limited). Analytics data may be processed outside the UK under Google's standard contractual clauses; we do not enable Google Signals, advertising features or data sharing for advertising purposes. When your browser loads these resources, your IP address is shared with those providers solely to deliver the content securely. They do not use it for tracking or profiling, though they may set their own strictly necessary cookies to serve the request.
Card details are entered on Stripe's own secure checkout page and never touch our systems. See our Privacy Notice for the full list of data processors.
Managing cookies
Because our cookies are strictly necessary for the platform to function, blocking them may prevent you from signing in or completing HMRC authorisation. You can control or delete cookies at any time through your browser settings - see your browser's help pages for instructions.
Clearing your browser's local storage will reset the cookie notice and other preferences listed above.
Changes to this policy
We introduced Google Analytics on our public pages in August 2026, and asked for consent before setting it - as promised in the earlier version of this policy. If we ever introduce further non-essential cookies we will do the same again. Any changes will be reflected by the "Last updated" date above.
Contact
Questions about cookies or privacy? Email privacy@ola-accountancy.co.uk.