Cookie Policy
Last Updated: 7th October 2026
Cookie Policy
This Cookie Policy explains how Student Castle Property Management Services Limited (“Student Castle”, “SCPMS”, “we”, “us” or “our”) uses cookies and similar technologies on www.studentcastle.co.uk and related website functions that link to this policy.
It should be read alongside our Privacy Policy, which explains how we use personal data more generally.
1. The laws that apply
Our use of cookies and similar technologies is governed by UK privacy law, including the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025 (“DUAA”).
The DUAA changed the PECR rules by introducing limited additional exceptions for certain statistical and appearance/functionality purposes. Those exceptions are narrow and have conditions. Advertising and cross-site tracking continue to require consent.
2. What are cookies and similar technologies?
A cookie is a small text file stored on your device when you visit a website. Cookies can remember information about your visit, maintain a session, protect forms, measure use of a website or support advertising.
Similar technologies can include pixels, tags, scripts, local storage, software development kits, device identifiers and other techniques that store information on, or access information from, your device. In this policy, we use “cookies” as a convenient term for cookies and similar storage/access technologies unless the context requires otherwise.
3. The categories we use
Category | Why we use it | Consent / legal position |
Strictly necessary | Required to operate the Website or provide a service you request, for example security, session management, fraud prevention, load balancing, booking/session continuity and storing privacy choices. | Consent is not required where the PECR communication or strictly-necessary exception applies. |
Functional / preferences | Remember choices or adapt the appearance or functionality of the Website, for example selected preferences or display settings. | Consent is used unless a valid PECR appearance exception applies. Where we rely on that exception, we provide clear information and a simple, free means of objecting. |
Analytics / performance | Understand how the Website is used, measure performance, identify problems, improve navigation and test website features. | Consent is used unless the use meets the narrow PECR statistical-purposes exception. That exception requires aggregate statistical use, no individual tracking/profiling and a simple, free means of objecting. |
Advertising / targeting | Measure advertising, attribute conversions, create or use advertising audiences, limit ad frequency or personalise ads. | Consent is required. PECR exceptions do not apply to online-advertising purposes. |
Embedded content / third-party features | Provide optional maps, videos, virtual tours, chat, social-media or similar functionality. | Depends on the purpose. Non-essential storage/access is not enabled until consent unless a specific legal exception applies. |
4. Cookies currently identified on the Student Castle website
The current public Cookie Policy identifies the following cookies. The Website also uses Google Tag Manager to deploy website tags. Because suppliers, tag configurations and cookie names can change, the live cookie-preference tool should contain the most up-to-date inventory of cookies actually active on the Website.
Provider / technology | Example name(s) | Category | Purpose / treatment |
Google Analytics | ga, gid, gat and/or GA4 variants such as ga_* | Analytics / performance | Measures website usage and performance. Whether consent is required depends on the live configuration; standard user-level analytics/tracking should remain consent-controlled unless the statutory statistical exception is demonstrably met. |
Cookie preference | CookieControl or successor preference cookie | Strictly necessary | Stores or recalls the user’s cookie/privacy choice. |
Website session | ASP.NET_SessionId or successor session technology | Strictly necessary | Maintains a website session where required. |
Form security | __RequestVerificationToken or successor anti-forgery technology | Strictly necessary | Protects forms against cross-site request forgery and similar misuse. |
Google Tag Manager | Tag-management technology (not itself necessarily a cookie) | Infrastructure / depends on tags deployed | Controls deployment of analytics, advertising or other tags. Each underlying tag is governed by its own purpose and consent status. |
Where Google Ads, social-media advertising, embedded media, maps, chat, virtual tours or other third-party tools are enabled, they may set additional cookies or use similar technologies. These should be listed and controlled in the live Cookie Settings interface according to their purpose.
5. When we ask for consent
Where consent is required, non-essential cookies should be disabled until you make a choice. Our cookie mechanism should allow you to accept non-essential cookies, reject them, or manage categories. Consent must be freely given, specific, informed and unambiguous, and withdrawing consent should be as easy as giving it.
You can change your mind at any time using the Cookie Settings control available on the Website. Withdrawing consent does not make earlier lawful use invalid, but we will stop the relevant future storage/access and associated processing as required.
6. Cookies that may not require consent
PECR allows limited exceptions to the usual consent requirement. We only rely on an exception where all of its conditions are met. These include:
· Communication: storage/access used solely to transmit a communication over an electronic communications network.
· Strictly necessary: storage/access essential to provide an online service that you have requested, such as security or a required session.
· Statistical purposes: storage/access used solely to collect statistical information about use of the service with a view to improving it, provided the resulting information is aggregate and cannot be used to identify or track individuals. We must also provide clear information and a simple, free means to object.
· Appearance / functionality: storage/access used solely to adapt or enhance how the service appears or functions in line with a user’s preference, subject to clear information and a simple, free means to object.
· Emergency assistance: limited location-related storage/access for the sole purpose of identifying the location of a user requiring emergency assistance, where the statutory conditions apply.
Advertising, cross-site or cross-device tracking, behavioural profiling and advertising measurement do not qualify for these exceptions and require consent.
7. Third-party cookies and tags
Some Website functionality is provided by third parties, such as analytics, advertising, search, maps, video, social media, chat, virtual tours, booking or other digital-service providers. Where those providers set or access information on your device through our Website, we are responsible for ensuring the appropriate PECR controls are applied to our deployment of those technologies.
Third parties may also process information as controllers under their own privacy terms. The Cookie Settings interface and our Privacy Policy provide further information about the categories of third parties we use.
8. How long cookies last
Session cookies normally expire when you close your browser. Persistent cookies remain for a defined period or until you delete them. The duration depends on the cookie and its purpose. We aim to keep durations no longer than necessary and the live Cookie Settings inventory should display current expiry information for individual cookies where available.
9. Browser and device controls
You can also use browser or device settings to block or delete cookies. Blocking all cookies may affect essential functionality, including security, booking sessions or other features you request. Browser settings are not a substitute for the Website controls we are required to provide, but they give you an additional way to manage storage on your device.
10. Changes to this Cookie Policy
We may update this Cookie Policy when our Website, suppliers, cookie configuration, technology or legal requirements change. The latest version will be published on the Website and will show the date of the most recent update.
11. Contact us
· Privacy / data protection: dpo@studentcastle.co.uk
· General enquiries: head.office@studentcastle.co.uk
· Post: Student Castle Property Management Services Limited, 4th Floor, WestWorks, White City Place, 195 Wood Lane, London W12 7FQ