www.knowndesign.ai
Version 1.0 | Effective: June 2026| Last Updated: June 2026
PECR 2003 · UK GDPR · Data Protection Act 2018 · Data (Use and Access) Act 2025
Governing Law: This Cookie Policy is governed by the laws of England and Wales. The use of cookies and similar technologies on www.knowndesign.ai is regulated in the UK by the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025, and the UK GDPR. All users contracting with Known Design AI Ltd do so on the basis of English law.
This Cookie Policy is published by Known Design AI Ltd (“we” or “us”), a company registered in England and Wales. It explains what cookies and similar tracking technologies are used on www.knowndesign.ai, why we use them, how long they last, and how you can manage or withdraw your consent at any time. This policy forms part of our overall UK data protection framework and should be read alongside our Privacy Notice https://knowndesign.ai/privacy-policy and Terms and Conditions https://knowndesign.ai/terms-and-conditions.
| Legislation | Relevant Provision | What It Requires |
|---|---|---|
| Privacy and Electronic Communications Regulations 2003 (PECR) SI 2003/2426 | Regulation 6 | Prior informed consent required before storing or accessing information on a user's device, except for strictly necessary cookies. This is the primary UK cookie law. |
| UK GDPR and Data Protection Act 2018 | Article 7 UK GDPR; Schedule 1 DPA 2018 | Consent must be freely given, specific, informed, and unambiguous. Pre-ticked boxes and bundled consent are not lawful. Consent must be recorded and as easy to withdraw as to give. |
| Data (Use and Access) Act 2025 (DUAA 2025) – in force 5 February 2026. ICO guidance: 29 April 2026. | Amends PECR | New exceptions to consent requirement for: (i) purely aggregate analytics not linked to individuals; and (ii) cookies improving website appearance or layout. Conditions apply. PECR fines increased to align with UK GDPR maximums. |
The ICO is the UK’s supervisory authority for PECR and UK GDPR. The DUAA 2025 increased the maximum fine for serious PECR breaches to £17.5 million or 4% of global annual turnover, whichever is higher.
A cookie is a small text file placed on your device when you visit a website. We also use related technologies including: web beacons and pixel tags (transparent images that record when a page or email is opened); local storage (similar to cookies but not automatically transmitted to servers); session replay scripts such as Microsoft Clarity (used via 10Web for AI co-pilot troubleshooting only); and JavaScript tags (small scripts collecting visit data).
First-party cookies are set directly by Known Design AI Ltd from the knowndesign.ai domain. Third-party cookies are set by our technology partners – Google LLC, Microsoft Corporation, Stripe Inc., Meta Platforms Inc., LinkedIn (Microsoft), and Cloudflare Inc.
Session cookies are temporary and deleted when you close your browser. Persistent cookies remain on your device for a defined period and are reactivated when you return to the website.
| Category | Legal Basis Under PECR / UK GDPR | Consent Required? | Can You Opt Out? |
|---|---|---|---|
| Strictly Necessary | Regulation 6(4) PECR – exempt from consent. Necessary to provide the service you have requested. | No | No – disabling will impair or prevent use of the Service |
| Analytics (Behavioural) | Consent – Regulation 6 PECR and Art. 6(1)(a) UK GDPR | Yes – via Cookie Preference Centre | Yes – via Cookie Preference Centre |
| Analytics (Aggregate only) | Recognised Legitimate Interest / Legitimate Interests – DUAA 2025 and Art. 6(1)(f) UK GDPR. ICO April 2026 guidance applies. | No – where data is purely aggregate and not linked to any individual | Yes – opt-out must be available per ICO guidance |
| Functional / Preference | Consent – Regulation 6 PECR and Art. 6(1)(a) UK GDPR | Yes – via Cookie Preference Centre | Yes – via Cookie Preference Centre |
| Marketing / Targeting | Explicit consent – Regulation 6 PECR and Art. 6(1)(a) UK GDPR | Yes – explicit consent required | Yes – via Cookie Preference Centre |
The Data (Use and Access) Act 2025 (in force 5 February 2026) introduced a new exception to the PECR consent requirement for cookies used solely for statistical purposes where analytics are purely aggregate – no information relating to an identifiable individual is produced, used, or stored. Where we rely on this exception: analytics data does not identify or profile individual users; we provide a clear and comprehensive privacy notice; we offer a clear opt-out mechanism; and the data is not used for any further purpose including marketing or targeted advertising.
The following tables set out all cookies in use on www.knowndesign.ai. Because the Service is built on 10Web’s white-label AI WordPress website builder platform, some cookies are set by 10Web’s infrastructure on our behalf.
Set without consent under PECR Regulation 6(4). Essential for login and core platform functionality.
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| wordpress_logged_in_[hash] | Known Design AI / 10Web (WordPress) | First-party, Persistent | Authenticates logged-in users and maintains dashboard sessions | Up to 14 days |
| wordpress_sec_[hash] | Known Design AI / 10Web (WordPress) | First-party, Persistent | Secure authentication cookie restricting access to WordPress admin | Up to 14 days |
| wp-settings-[user_id] | Known Design AI / 10Web (WordPress) | First-party, Persistent | Stores display preferences in the WordPress admin dashboard | 1 year |
| wp-settings-time-[user_id] | Known Design AI / 10Web | First-party, Persistent | Records timestamp when WordPress settings were last updated | 1 year |
| wordpress_test_cookie | Known Design AI / 10Web | First-party, Session | Tests whether your browser accepts cookies before completing login | Session |
| PHPSESSID | Known Design AI / 10Web | First-party, Session | Maintains server-side session state across page requests | Session |
| 10web_[token] | TenWeb, Inc. (10Web) | First-party, Persistent | Authenticates your session within the 10Web AI Website Builder dashboard | Up to 30 days |
| __stripe_mid | Stripe, Inc. | Third-party, Persistent | Fraud prevention: assesses payment risk. Set when interacting with a payment form. | 1 year |
| __stripe_sid | Stripe, Inc. | Third-party, Session | Fraud prevention: session identifier used by Stripe during a payment transaction | 30 minutes |
| csrf_token | Known Design AI | First-party, Session | Cross-Site Request Forgery protection — prevents unauthorised commands | Session |
| __cf_bm | Cloudflare, Inc. | Third-party, Session | Bot management: distinguishes human visitors from automated bot traffic | 30 minutes |
| cf_clearance | Cloudflare, Inc. | Third-party, Persistent | Stores proof of passing Cloudflare's bot challenge to prevent repeated challenges | 1 year |
Set only with your consent via our Cookie Preference Centre.
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| _ga | Google LLC (Google Analytics 4) | Third-party, Persistent | Assigns a randomly generated identifier to distinguish unique visitors. IP addresses anonymised by default in GA4. | 2 years |
| _ga_[ID] | Google LLC (Google Analytics 4) | Third-party, Persistent | Stores and updates a unique value for each page visited to persist GA4 session state. | 2 years |
| _gid | Google LLC (Google Analytics 4) | Third-party, Persistent | Distinguishes users from one another for analytics purposes. | 24 hours |
| _gat / _gat_[ID] | Google LLC (Google Analytics 4) | Third-party, Persistent | Throttles the request rate to Google Analytics on high-traffic sites. | 1 minute |
| _gac_[ID] | Google LLC / Google Ads | Third-party, Persistent | Stores campaign-related information for Google Analytics and Ads conversion tracking. | 90 days |
Purely aggregate, non-identifiable statistics. No individual tracking. Opt-out available via Cookie Preference Centre.
| Cookie / Technology | Provider | Data Collected | Purpose | Individual Tracking? |
|---|---|---|---|---|
| Aggregate page view statistics (GA4 in aggregate-only mode) | Google LLC | Total visits, page impressions, general traffic source — no user identifiers, no cross-session tracking | Understanding overall website traffic volume and popular content | No — purely aggregate |
Set only with your consent. Enable enhanced functionality and remember your preferences.
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| pll_language / wp-wpml_current_language | Polylang / WPML via 10Web | First-party, Persistent | Stores your preferred language selection where the site operates in multiple languages | 1 year / Session |
| CookieConsent / gdpr_[preference] | Consent Management Platform (CMP) | First-party, Persistent | Records your cookie consent choices to avoid asking again on each visit | 1 year |
| _10web_user_prefs | TenWeb, Inc. (10Web) | First-party, Persistent | Stores your display and layout preferences within the 10Web AI Builder dashboard | 6 months |
| timezone | Known Design AI | First-party, Persistent | Remembers your timezone to display dates and scheduled content correctly | 1 year |
Set only with your explicit consent. Used for targeted advertising and campaign measurement.
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| _fbp | Meta Platforms, Inc. (Facebook Pixel) | Third-party, Persistent | Identifies your browser to Meta/Facebook's advertising systems to deliver and measure relevant advertising | 3 months |
| _fbc | Meta Platforms, Inc. | Third-party, Persistent | Stores the last Facebook Click ID for advertising attribution | 2 years |
| IDE | Google LLC (DoubleClick) | Third-party, Persistent | Measures the effectiveness of advertisements and delivers relevant ads via Google DoubleClick | 1 year |
| _gcl_au | Google LLC (Google Ads) | Third-party, Persistent | Used by Google AdSense to measure advertising efficiency across websites | 3 months |
| li_sugr / bcookie | LinkedIn (Microsoft) | Third-party, Persistent | LinkedIn Insight Tag – tracks conversions, enables retargeting, and provides LinkedIn ads analytics | 3 months / 2 years |
Set by 10Web’s underlying infrastructure under our Data Processing Agreement with TenWeb, Inc.
| Cookie Name | Provider | Purpose | Duration | Personal Data? |
|---|---|---|---|---|
| _clarity | Microsoft Corp. (via 10Web) | Session recording for AI co-pilot troubleshooting only – records video of website changes. IP anonymised. Data deleted after one month. NOT used to train AI models. | 1 year (identifier). Recording data deleted after 1 month. | Yes – IP address (anonymised), session behaviour |
| CLID | Microsoft Corp. (via 10Web) | Identifies whether Clarity has previously seen this user on any site using Clarity. | 1 year | Yes – browser identifier |
| MR | Microsoft Corp. (via 10Web) | Collects statistical data on Service usage in conjunction with Clarity. | 7 days | Minimal |
| SM | Microsoft Corp. (via 10Web) | Synchronises Microsoft User ID across subdomains for consistent Clarity operation. | Session | Yes – user identifier |
When you first visit www.knowndesign.ai, a cookie consent banner is displayed complying with ICO guidance and PECR 2003: all non-essential categories are pre-set to OFF; ‘Accept All’, ‘Reject All’, and ‘Manage Preferences’ options are equally prominent; no pre-ticked boxes or dark patterns are used; no non-essential cookies are set before your active choice; and the banner links to this Cookie Policy.
You can view, change, or withdraw your cookie preferences at any time via the Cookie Preference Centre accessible from the [Cookie Settings] link in the footer of every page on our website.
We maintain a log of all cookie consents complying with Article 7 UK GDPR and ICO guidance, including: date and time of consent; version of Cookie Policy in force; categories accepted; and method of consent. Consent records are retained for a minimum of 12 months.
Withdraw consent at any time via the Cookie Preference Centre, by clearing your browser cookies and cache, or by contacting us at privacy@knowndesign.ai. Withdrawal does not affect the lawfulness of prior processing.
Withdrawing consent to strictly necessary cookies will prevent you from logging in and will impair core features of the Service.
| Browser | How to Manage Cookies |
|---|---|
| Google Chrome | Settings > Privacy and Security > Cookies and other site data |
| Mozilla Firefox | Settings > Privacy & Security > Cookies and Site Data |
| Apple Safari (macOS) | Preferences > Privacy > Manage Website Data |
| Apple Safari (iOS / iPadOS) | Settings > Safari > Privacy & Security |
| Microsoft Edge | Settings > Cookies and site permissions > Cookies and site data |
| Opera | Settings > Advanced > Privacy & Security > Site Settings > Cookies |
| Provider | Opt-Out Method |
|---|---|
| Google Analytics | Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout |
| Google Advertising | Google Ad Settings: adssettings.google.com |
| Meta / Facebook Ads | Facebook Ad Preferences: facebook.com/ads/preferences |
| Microsoft / Clarity | Microsoft Privacy Dashboard: account.microsoft.com/privacy |
| LinkedIn Ads | LinkedIn Ad Settings: linkedin.com/psettings/guest-controls/retargeting-opt-out |
| All UK digital advertising (YourAdChoices) | Your Online Choices: youronlinechoices.com |
Where cookies involve processing of personal data, this is governed by our Privacy Notice [INSERT URL] incorporated into this Cookie Policy. Known Design AI Ltd is the Data Controller for cookies set by us. Third-party providers (Google, Meta, Microsoft, Stripe, Cloudflare, LinkedIn) are independent controllers for data their cookies collect. TenWeb, Inc. (10Web) processes cookie-related personal data as our Data Processor under a Data Processing Agreement compliant with Article 28 UK GDPR. International transfers are protected by UK IDTA or UK Addendum to EU SCCs as described in our Privacy Notice.
| Tool | Key Features |
|---|---|
| CookieYes (cookieyes.com) | Free tier available. Auto-scans cookies, generates cookie register, PECR/UK GDPR compliant banner, consent logging. WordPress plugin. Recommended for 10Web-hosted sites. |
| Cookiebot / Usercentrics (cookiebot.com) | Automated daily scanning, Google Consent Mode v2 integration, UK GDPR compliant. Paid plans from approx. £8/month. WordPress plugin. |
| Complianz (complianz.io) | WordPress-native plugin. UK/EU region-based consent. Free and premium versions. Auto cookie identification. |
| CookieServe (cookieserve.com) | Free cookie scanner. Use to audit your live site before publishing this Policy. Not a CMP but valuable for verification. |
We commit to reviewing and updating this Cookie Policy at least annually, running a live cookie scan after any major platform update, and notifying registered users by email of any material changes. When we update this Policy, we will update the ‘Last Updated’ date and re-prompt consent where required by law.
Known Design AI Ltd
Cookie / Privacy Enquiries: privacy@knowndesign.ai
Registered Office: 71 – 75 Shelton Street, Covent Garden, London WC2H 9JQ
ICO Registration Number: ZC082723
Website: www.knowndesign.ai
To complain about our handling of cookie data: Information Commissioner’s Office (ICO) – www.ico.org.uk | Tel: 0303 123 1113 | Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
This Cookie Policy is governed by and construed in accordance with the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction in relation to any disputes arising from or in connection with this Policy, subject to your statutory rights as a Consumer if domiciled in Scotland or Northern Ireland.
Copyright © Known Design AI Ltd 2026. All Rights Reserved. Privacy Policy, Terms and Conditions, Cookie Policy, GDPR Compliance, DUAA2025, ICO Compliance #ZC082723.