Buff CRM — Cookie Policy

DASE Systems Limited
45 Main Street, Leeds, West Yorkshire, LS25 1DS
Company Number: 17333059
VAT Registration: GB 525137996
ICO Registration: Pending registration with the Information Commissioner's Office

Version 1.1
Effective date: 8 October 2026
Last updated: 8 October 2026

About this policy

This Cookie Policy explains what cookies and similar tracking technologies are used in connection with the Buff CRM Platform, operated by DASE Systems Limited, and how you can control them.

This policy should be read alongside our Privacy Policy, which provides further information about how we handle your personal data more broadly.

If you have any questions about our use of cookies, please contact us at [email protected].

Part 1 — What are cookies

Cookies are small text files that are placed on your device when you visit a website or use a web application. They are widely used to make websites and applications function correctly, to improve efficiency, and to provide information to the operators of those sites.

Session cookies — temporary cookies deleted when you close your browser or end your session. Used to keep you logged in during a single visit.

Persistent cookies — cookies that remain on your device for a set period of time even after you close your browser. Used to remember your preferences across multiple visits.

First-party cookies — cookies set directly by DASE.

Third-party cookies — cookies set by a domain other than the website you are visiting, typically by third-party services the site uses.

We may also use similar technologies such as local storage, session storage, and pixels. Where this policy refers to "cookies", it includes all such technologies unless the context otherwise requires.

Part 2 — The Buff CRM application

This section covers cookies used within the Buff CRM application at app.buffcrm.co.uk.

2.1 Strictly necessary cookies

Strictly necessary cookies are essential for the Platform to function. These do not require your consent under PECR because they are strictly necessary for a service you have requested.

Cookie	Purpose	Type	Duration
`sid`	Session identifier. Keeps you authenticated.	Session	Session
`system_user`	Identifies whether the logged-in user is a system user.	Session	Session
`user_id`	Stores your user identifier to maintain logged-in state.	Session	Session
`full_name`	Stores your display name for use within the interface.	Session	Session
`csrf_token`	Cross-Site Request Forgery protection. Critical security cookie.	Session	Session
`io`	Maintains your real-time connection for live updates.	Session	Session

2.2 Analytics cookies

The application sets no analytics cookies. Every cookie the Platform uses is listed in this Part and is strictly necessary to provide a service you have requested, so no consent is required for them and you are not shown a consent banner inside the application.

Analytics is used only on our public marketing website at buffcrm.co.uk, where it is opt-in — see Part 3.

2.3 Functional cookies

Cookie	Purpose	Type	Duration
`language`	Remembers your language preference.	Persistent	12 months
`timezone`	Remembers your timezone setting.	Persistent	12 months
`sidebar_state`	Remembers whether you have collapsed the navigation sidebar.	Persistent	30 days

2.4 Security cookies

Cookie	Purpose	Type	Duration
`__cf_bm`	Set by Cloudflare. Distinguishes human users from automated bot traffic.	Session	30 minutes
`_cfuvid`	Set by Cloudflare. Used for rate limiting to protect the Platform from abuse.	Session	Session

Part 3 — The Buff CRM marketing site

This section covers cookies used on the Buff CRM marketing website at buffcrm.co.uk.

3.1 Strictly necessary cookies

Cookie	Purpose	Type	Duration
`__cf_bm`	Set by Cloudflare. Bot protection and traffic management.	Session	30 minutes
`buffcrm_cookie_consent`	Records your cookie consent choice on the marketing site.	Persistent	12 months

3.2 Analytics cookies

We use Google Analytics 4 on the marketing site to understand how visitors find and navigate it and which pages are useful. These cookies are set only if you accept them in the consent banner. If you decline, or your browser sends a Do Not Track signal, no analytics script is loaded and no analytics cookie is set.

Google Analytics is provided by Google LLC (United States), which acts as our processor for this purpose. The transfer is made under Google's UK GDPR terms, which incorporate the UK International Data Transfer Addendum. We do not use analytics data for advertising or profiling, and no tenant or customer data from the Buff CRM application is sent to it.

Cookie	Purpose	Type	Duration
`_ga`	Google Analytics. Distinguishes one visitor from another.	Persistent	24 months
`_ga_E0LH98DQKK`	Google Analytics. Maintains session state for this property.	Persistent	24 months

3.3 Attribution cookies

When you arrive via a referral or affiliate link, we set a short-lived session storage entry to preserve attribution parameters through to signup. This is stored in your browser's session storage, not as a cookie, and is transmitted to us only when you complete the signup process.

3.4 Future cookies

We may in future introduce additional cookies on the marketing site. We will update this Cookie Policy before introducing any new cookie categories and will seek your consent for any non-essential cookies before placing them.

Part 4 — Managing your cookie preferences

4.1 Cookie consent

When you first visit our marketing website at buffcrm.co.uk you are shown a cookie consent banner. Analytics cookies are set only if you accept them. You can change your decision at any time using the Cookie settings link in the site footer, which reopens the banner.

You can also decline and still use the site in full — no feature depends on analytics.

The Buff CRM application does not show a consent banner, because it sets only strictly necessary cookies.

4.2 Browser settings

You can control cookies through your browser settings. Guidance for common browsers:

Google Chrome: support.google.com/chrome/answer/95647
Mozilla Firefox: support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Apple Safari: support.apple.com/en-gb/guide/safari/sfri11471/mac
Microsoft Edge: support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge

4.3 Do Not Track

Where your browser sends a Do Not Track signal, we will honour that preference and will not set optional analytics or functional cookies.

4.4 Opting out of third-party cookies

Cloudflare cookies are governed by Cloudflare's own privacy policy at cloudflare.com/privacypolicy.

Part 5 — Cookies and personal data

Where cookies involve the processing of personal data, that processing is governed by our Privacy Policy. Cookies that do not involve personal data are still governed by the Privacy and Electronic Communications Regulations 2003 (PECR).

Part 6 — Changes to this cookie policy

We may update this Cookie Policy from time to time. We will notify existing Subscribers of material changes via the Platform or by email. Previous versions are available on request by emailing [email protected].

Part 7 — Contact us

By email: [email protected]

By post:
Data Protection, DASE Systems Limited, 45 Main Street, Leeds, West Yorkshire, LS25 1DS

You also have the right to lodge a complaint with the Information Commissioner's Office: ico.org.uk | 0303 123 1113

This Cookie Policy was last updated on 22 July 2026 and is effective from 22 July 2026.