The cookies cheap car tow uses, the consent mechanism, and how to manage your choices.
cheap car tow is a booking and price-publication service. The recovery itself is performed by an independent PAS 43 compliant operator dispatched at the published rate. See terms for the operator-panel arrangement.
A small text file stored in your browser by a website. Cookies make it possible to keep state across pages (a shopping basket, a logged-in session, a consent choice) and to identify the device for analytics.
The legal framework for cookie use in the UK is the Privacy and Electronic Communications Regulations 2003 (PECR), administered by the Information Commissioner's Office.
Strictly necessary: session cookie for the booking form, CSRF token for security, consent record. Cannot be turned off; without these the site cannot function.
Analytics: anonymised page-view counts and device-class breakdowns. Set only after consent. Provider: a UK-based or EEA-based analytics provider.
Marketing: ad-attribution and remarketing pixels for the limited paid campaigns we run. Set only after consent.
We do not use social-media-like buttons that fire third-party cookies before consent.
On your first visit the consent banner appears. Three options: Accept All, Reject All, Manage. The Manage view lets you set analytics and marketing separately. The consent record is stored in a strictly necessary cookie alongside the timestamp of your choice.
You can reopen the banner at any time by clicking the Cookies link in the footer. Changing your choice takes effect on the next page load.
Strictly necessary session cookies expire when the browser closes; the CSRF token is per-session.
Consent record cookie: 12 months. After that the banner re-appears so you can re-confirm.
Analytics and marketing cookies: 13 months maximum lifespan in line with the ICO guidance.
The active provider list is published on request to the data protection contact email. We use a small number of providers: an analytics provider, a payment processor, an email provider and a CDN. Each is bound by a data processing agreement.
International transfers are covered in the privacy policy.
You can also manage cookies in the browser itself. Each major browser exposes a per-site cookies view in the privacy settings; you can block all cookies, block third-party cookies only, or clear stored cookies.
The gov.uk cookie guidance covers the controls in major browsers.
Cookies that identify the device or user count as personal data under UK GDPR. The lawful basis for the analytics and marketing cookies is consent. The lawful basis for strictly necessary cookies is contract performance (the booking flow needs them) and the PECR exception for strictly necessary cookies.
The site is not directed at children under 13. We do not knowingly process the personal data of under-13s through cookies or any other channel. Where a parent or guardian believes we have inadvertently collected such data they can contact the data protection email and the data is deleted on receipt of the request.
The current cookie inventory, with the lifetime and the lawful basis for each:
This list is updated on the cookie policy review cycle. If a future change adds a cookie not on this list, the cookie is not set until the policy is updated.
A small number of cookies are set by third-party sub-processors we use to deliver the service. Active sub-processors and the cookies they may set:
Where a sub-processor changes (we move to a different payment processor, for example) the new processor's cookies are listed here before the change goes live. The change log at the foot of this policy records the date.
The consent record is held in the cct_consent cookie on your device and in an internal consent log keyed by the cookie value (which is itself not identifying). The log records the timestamp of your choice, the cookie categories you accepted, and the policy version live at the time. Retention: until you withdraw consent or the cookie expires, whichever is earlier.
If the Information Commissioner's Office asks for the consent log under their statutory powers, we provide it with the policy version snapshot for the relevant date. The log is not shared with any third party for any other purpose.
You can ask for a copy of your own consent log entry through the standard subject access request route on the privacy policy page; we reply within one calendar month.
You can manage cookies in the browser itself as well as through our consent banner. Each major UK browser exposes a per-site cookies view in privacy settings.
Clearing all cookies will log you out of any session, remove your consent record (so the banner re-appears on next visit), and clear any saved booking-form state. The gov.uk guidance at gov.uk/help/cookie-details covers the controls in plain English.
First published 2026-05-17. The cookie policy is reviewed every 12 months or sooner if the cited primary source changes. Material changes (new lawful basis, new escalation route, new scope) are added below with a date and a one-line reason. Editorial corrections (typo, broken link) are not logged here; the live page is the source of truth.
If anything in this cookie policy reads as inaccurate, out of date, or unclear, email the editorial team at hello@cheapcartow.co.uk with the page URL and a description of the issue. The editorial team replies inside three business days; a material correction is published with a dated note in this section. External escalation routes (ICO, Trading Standards, Financial Ombudsman Service) apply where the relevant complaint is in scope for the regulator.
Only the strictly necessary ones (session, security, consent record). Analytics and marketing cookies are not set until you have given consent.
Yes; the consent banner offers a Reject All. Strictly necessary cookies remain because they are required for the booking flow.
Click the Cookies link in the footer to reopen the consent banner; change your choices and save.
Only with your consent. No third-party trackers fire before the consent banner is answered.
In the browser on the device you are using. Server-side session cookies are stored alongside the booking record.
Some are. Cookies that identify the device or user count as personal data under UK GDPR.
Published price, PAS 43 compliant operator, 24/7 dispatch.