← Back to the site

Cookie policy

Last reviewed: 30 September 2026

This policy explains what cookies Virtual IT Support Ltd uses, and why. It covers www.virtualitsupport.co.uk and our support desk at support.virtualitsupport.co.uk.

The short version. We use no advertising, tracking or analytics cookies anywhere. The only cookies we set are the ones that keep you signed in to the client portal or the staff desk. Because those are strictly necessary to provide a service you asked for, we do not need to show you a consent banner — and we would rather not add one you have to dismiss for no reason.

What a cookie is

A cookie is a small text file a website asks your browser to store. It can be read back on a later request, which is how a site recognises you between one page and the next. Some cookies exist to make a service work; others exist to follow you between sites and build a profile for advertising. We use only the first kind.

Cookies on the main website

The public pages — the homepage, service pages and the ticket form — set no cookies at all. Nothing is stored in your browser between visits and nothing identifies you.

Cookies on the support desk and client portal

If you sign in to the client portal to view your tickets, or you are a member of our staff signing in to the support desk, two cookies are set. Both are required for signing in to work at all.

NamePurposeExpires
vits_session Keeps you signed in. It holds a random token, not your name, email address or password. The token is matched against a record on our server and means nothing if copied elsewhere. 12 hours, or when you sign out
vits_s A short-lived session identifier used to protect forms against cross-site request forgery — a type of attack where another website tries to make your browser submit something on your behalf. When you close your browser

Both cookies are set with the Secure flag, so they are only ever sent over an encrypted connection; HttpOnly, so scripts running in the page cannot read them; and SameSite=Lax, so they are not sent when another website makes a request to ours. Neither is shared with anyone.

Do these need my consent?

No. Under regulation 6(4) of the Privacy and Electronic Communications Regulations, a cookie that is strictly necessary to provide a service the user has explicitly requested is exempt from the consent requirement. Signing in is such a service. This is the same reason online banking does not ask permission to keep you logged in.

You can still refuse or delete them in your browser settings, but the portal and desk will not be able to sign you in if you do.

Third-party requests

Google Fonts

Our typefaces are loaded from fonts.googleapis.com and fonts.gstatic.com. This sets no cookies, but your browser does make a request to Google's servers, and Google receives your IP address as part of it. We are working towards serving these files ourselves so that request stops happening.

Cloudflare Turnstile

The ticket form may use Cloudflare Turnstile to tell real people from automated submissions. Turnstile is designed to work without tracking cookies and does not profile you or follow you to other sites. Cloudflare processes technical signals from your browser solely to decide whether the submission is automated. See Cloudflare's privacy policy.

What we do not use

To be explicit, we do not use any of the following: Google Analytics or any other analytics package, advertising or remarketing pixels, Meta or LinkedIn tracking, heatmap or session recording tools, embedded chat widgets, or social media share buttons that track you.

If that changes, this page will be updated before the change goes live, and anything requiring consent will be blocked until you give it.

Managing cookies in your browser

Every major browser lets you view, block and delete cookies. The relevant setting is usually under Privacy or Security in your browser's settings menu. Blocking all cookies will prevent the client portal and staff desk from working, but will not affect the rest of the site.

Changes to this policy

We review this page whenever we change how the website or support desk works. The review date at the top always reflects the current version.

Contact

Questions about this policy, or about how we handle your data more generally, can go to support@virtualitsupport.co.uk or 033 3323 7731.

Virtual IT Support Ltd is registered in Scotland, company number 15022976. See also our privacy policy.