This Cookie Policy explains how PortfolioHub (“we”, “us”, “our”) uses cookies and similar technologies on www.portfoliohub.uk and the signed-in PortfolioHub application. It should be read alongside our Privacy Policy.
We take a minimal approach: we only set cookies that are strictly necessary to run the Service, plus a small number of preference entries that remember choices you have made (such as your cookie-banner decision). We do not currently run any advertising, marketing or cross-site tracking cookies.
1. Who we are
The data controller responsible for cookies set by PortfolioHub is:
- Waqas Naz Ali, trading as PortfolioHub
- 60 Beaufort Road, Woking GU22 8BZ, United Kingdom
- waqas.ali@portfoliohub.uk
- Registered with the UK Information Commissioner’s Office — reference ZC124830 (registered 15 April 2026, expires 14 April 2027).
2. What are cookies?
Cookies are small text files that a website stores on your device when you visit it. They let the site recognise your browser across page loads — for example, to keep you signed in after you log in. Similar technologies include local storage, session storage and pixels. Throughout this policy we refer to all of these collectively as “cookies”.
3. The categories of cookies we use
Strictly necessary
Required for the Service to function. They cannot be switched off through the cookie banner because without them the site cannot keep you signed in, protect your session, or remember that you have made a cookie-preference choice. Under UK PECR these do not require your consent.
Functional
Remember preferences you set in the application — for example, whether you last viewed properties as cards or a table, or which tab you had open on a property detail page. They are stored in your browser’s local storage and never leave your device.
Analytics
Not currently used. We do not run any third-party analytics (Google Analytics, PostHog, Plausible, etc.) on the landing site or the signed-in application. If we introduce analytics in the future we will update this policy and will only enable them with your consent.
Marketing
Not currently used. We do not run advertising cookies, retargeting pixels, or cross-site tracking. We do not sell, rent or share any data with advertising networks.
4. The specific cookies and storage entries we set
The table below lists every first-party cookie and local-storage entry PortfolioHub sets directly. Any third-party cookies are covered in section 5.
On the landing site (before you sign in)
- ph_cookie_consent — records whether you accepted or rejected non-essential cookies on the landing banner. Local storage. Retained until you clear it or change your choice.
- ph_cookie_consent_at — timestamp of when that choice was made, so we can re-prompt you if our policy materially changes. Local storage.
Inside the signed-in application
- sb-access-token / sb-refresh-token — Supabase authentication cookies that keep you signed in and let your browser prove it is you on each request. Strictly necessary. Cleared when you sign out.
- sb-*-auth-token — Supabase session storage supporting the above. Strictly necessary.
- UI-preference entries (e.g. last-viewed tab, pinned filters, column visibility) — functional local-storage entries scoped to your browser. Cleared if you clear site data.
5. Third-party services
Some pages in the signed-in application embed third-party services that may set their own cookies. When they do, they act as independent data controllers and are governed by their own policies. The landing site itself does not load any of these services — they are only reached after you sign in.
- Supabase — authentication, database and file storage. Sets the auth cookies listed in section 4. See the Supabase Privacy Policy.
- Vercel — our hosting provider. May set strictly-necessary security and load-balancing cookies. See the Vercel Privacy Policy.
- Google Maps Platform — renders property-location maps inside the application. Loading a map may cause Google to set cookies on your device. See Google’s cookie policy.
- DocuSeal — hosts and signs tenancy and service agreements via an embedded iframe. May set session cookies during a signing flow. See the DocuSeal Privacy Policy.
- Calendly — used for broker onboarding scheduling. If embedded, Calendly may set functional cookies. See the Calendly Cookie Notice.
The following providers also process data on our behalf but are backend-to-backend and do not set cookies in your browser: Resend (transactional email), Anthropic (Claude API — document extraction), Credas (Right-to-Rent checks), Pipedrive (our internal CRM), PropertyData.co.uk, Ideal Postcodes, UPRN lookup, and the UK public registers for Companies House, the FCA Financial Services Register, the EPC Register and HM Land Registry. Full details are in our Privacy Policy.
6. Managing your preferences
When you first visit the landing site, a banner asks you to accept or reject non-essential cookies. Your choice is remembered in ph_cookie_consent. You can change your decision at any time using the button below:
This will clear your recorded choice and the banner will re-appear on your next page load, letting you make a fresh decision.
Browser-level controls
Most browsers also let you view, block or delete cookies directly in settings:
- Chrome — Settings › Privacy and security › Cookies and other site data
- Safari — Settings › Privacy
- Firefox — Settings › Privacy & Security
- Edge — Settings › Cookies and site permissions
Blocking strictly-necessary cookies will prevent you from signing in or using the application normally.
7. Your rights
Cookies that identify you are personal data under UK GDPR. You have the right to access, correct, delete, or restrict processing of your personal data, and to object to its use. Full details — and how to raise a complaint with the Information Commissioner’s Office (ICO) — are set out in our Privacy Policy.
The ICO can be contacted at: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · 0303 123 1113 · ico.org.uk.
8. Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in the tools we use, our legal obligations, or the categories of cookies we set. When we make a material change we will update the “last updated” date at the top of this page and, where appropriate, re-prompt you through the cookie banner.
9. Contact us
If you have any questions about our use of cookies, please use our contact form, email waqas.ali@portfoliohub.uk, or write to Waqas Naz Ali, 60 Beaufort Road, Woking GU22 8BZ, United Kingdom. ICO registration reference: ZC124830.