Version: 2.0
Last updated: 23 October 2026
Operated by: TUZO HQ LTD, company number 17444620, registered in England and Wales
Registered office: 82a, James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
ICO registration number: ZC282632
Contact: [email protected]
Telephone: 07466 785266
WhatsApp: 07466 785266
In short: TUZO HQ currently uses only the cookies and device storage needed to keep you signed in, keep your account secure and remember choices you make in the app. We do not currently use analytics, advertising or social media tracking cookies. If we ever introduce them on our public website, they will stay switched off unless you agree to them.
1. About this policy
1.1 This Cookie Policy explains how TUZO HQ LTD ("TUZO HQ", "we", "us" or "our") uses cookies and similar technologies on:
- our public website at https://tuzohq.com;
- the TUZO HQ software platform, including instructor, driving school and administration areas;
- learner and parent or guardian portals; and
- any TUZO HQ mobile application or other service that links to this policy.
1.2 This policy should be read with our Privacy Policy, which explains more generally how we use personal data, and our Terms and Conditions.
1.3 We are responsible for the cookies set by TUZO HQ on these services.
2. What cookies and similar technologies are
2.1 Cookies are small text files placed on your computer, tablet or phone when you use a website. They let the website recognise your device, keep you signed in and remember your choices.
2.2 We also use similar technologies, such as your browser's local storage, which keeps small pieces of information on your device. In this policy, "cookies" includes these technologies unless we say otherwise.
2.3 Session cookies are deleted when you close your browser or when your session ends. Persistent cookies stay on your device for a set period or until you delete them.
2.4 First-party cookies are set by us. Third-party cookies are set by another organisation, such as a provider whose service we use.
3. The law on cookies
3.1 Under the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR"), as amended by the Data (Use and Access) Act 2025, we must tell you clearly about the cookies we use and, unless an exemption applies, obtain your consent before storing or reading them.
3.2 Consent is not needed for cookies that are strictly necessary to provide a service you have asked for, such as signing in or keeping your account secure. The law also contains limited exemptions for certain other uses, such as some functionality and statistical uses, subject to conditions.
3.3 Where we use a cookie under an exemption, we will still tell you about it in this policy. Where information collected through cookies is personal data, we also comply with the UK GDPR and the Data Protection Act 2018.
4. Cookies we use
4.1 Strictly necessary cookies. These are needed for the website and platform to work securely. They keep you signed in, protect forms against forgery, protect accounts and remember choices you have made about security. They do not require your consent, and the services cannot work properly without them.
4.2 Functionality storage. The platform stores some display preferences on your device, such as light or dark mode and how your diary and menus are arranged, so the app looks the way you left it. This information stays on your device, is not sent to us for tracking, and is used only to provide the feature you are using.
4.3 Analytics cookies. We do not currently use analytics cookies. If we introduce analytics on our public website, such as Google Analytics 4, we will update this policy and the cookie table first, and the analytics will not run unless you have given consent through our cookie settings. We will not use analytics or advertising cookies inside the logged-in platform or the learner and guardian portals.
4.4 Marketing and advertising cookies. We do not currently use marketing, advertising or social media tracking cookies. We will not introduce them without first updating this policy and obtaining your consent.
5. Cookie table
5.1 The table below lists the cookies and device storage TUZO HQ currently uses.
| Name | Type and purpose | Set by | Duration | Consent needed? |
|---|---|---|---|---|
| tuzo-hq-session | Strictly necessary. Keeps you signed in and links your requests to your secure session. The session data itself is encrypted and stored on our servers. | TUZO HQ | Session; expires after 120 minutes of inactivity | No |
| XSRF-TOKEN | Strictly necessary. Protects forms against cross-site request forgery attacks. | TUZO HQ | Session; expires after 120 minutes of inactivity | No |
| remember_web_[reference] | Strictly necessary. Keeps you signed in on this device, only if you tick "Keep me signed in". | TUZO HQ | Until you sign out (maximum 400 days) | No |
| tuzo_trusted_[reference] | Strictly necessary. Remembers that you chose to trust this device for two-step sign-in, so you are not asked for a code every time. | TUZO HQ | 30 days | No |
| tuzo_device | Strictly necessary. A random device identifier that HMRC requires to be sent with Making Tax Digital submissions to help prevent fraud. Set only when you use the HMRC features. | TUZO HQ | Up to 400 days, renewed when used | No |
| __cf_bm and cf_clearance | Strictly necessary. Set by our security and content delivery provider, Cloudflare, to distinguish people from automated bots and protect the service against attacks. | Cloudflare | 30 minutes (__cf_bm); up to 1 year (cf_clearance, only if a security check is shown) | No |
| tuzo-theme | Functionality (local storage). Remembers your chosen light or dark display. | TUZO HQ | Until you change it or clear your browser storage | No |
| tuzo.nav.openGroups | Functionality (local storage). Remembers which menu sections you have opened. | TUZO HQ | Until you clear your browser storage | No |
| tuzo-diary-workspace and tuzo-diary-phone-view | Functionality (local storage). Remember how you arranged your diary view on this device. | TUZO HQ | Until you clear your browser storage | No |
5.2 Names shown in square brackets include a reference that varies. We will keep this table up to date and will add any new cookie before it is used.
6. Payments and other third parties
6.1 Subscription payments are set up through GoCardless. When you set up a Direct Debit, you may be taken to pages provided by GoCardless, which set their own cookies under GoCardless's cookie policy. We do not control those cookies.
6.2 Some features may link to third-party services, such as calendar applications. If you follow those links, the third party's own cookie policy applies.
6.3 If a provider we use processes personal data outside the United Kingdom, we ensure an appropriate transfer safeguard is in place, as explained in our Privacy Policy.
7. Location information
7.1 Some TUZO HQ features let an instructor record their arrival at a lesson, which can include device location. Location is not collected through cookies. It is accessed only through your device's or browser's own location permission, which you can grant or refuse at any time in your device settings.
7.2 Accepting or refusing cookies has no effect on location permissions. Location information is handled as described in our Privacy Policy.
8. Children and young people
8.1 Learner drivers under 18 and their parents or guardians may use TUZO HQ.
8.2 The learner and guardian portals use only the strictly necessary cookies and functionality storage described in section 5. We do not use analytics, profiling, advertising or social media tracking technologies in these portals, in line with the Information Commissioner's Age Appropriate Design Code.
9. Managing cookies
9.1 Because we currently use only strictly necessary cookies and functionality storage, we do not show a cookie consent banner. If we introduce any cookies that need consent, we will show a banner that lets you accept or reject them with equal ease, with no optional cookies switched on until you choose, and a "Cookie settings" link that lets you change your mind at any time.
9.2 Withdrawing consent will be as easy as giving it. When you withdraw consent, we will stop using the relevant cookies and delete them where we can.
9.3 You can also block or delete cookies, and clear local storage, through your browser settings. If you block strictly necessary cookies, you will not be able to sign in to the platform. Guidance for common browsers is available at ico.org.uk.
10. Your rights
10.1 Where cookies collect personal data, you have rights under UK data protection law, including the right to access your data, ask for it to be corrected or erased, object to or restrict certain processing and withdraw any consent you have given.
10.2 If you are unhappy with how we use cookies or personal data, please contact us first at [email protected]. We will acknowledge your complaint within 30 days and investigate it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
11.1 We will update this policy whenever we change the cookies we use, and the "Last updated" date will show when it last changed.
11.2 We will not start using any cookie that requires consent until this policy has been updated and you have given consent.
12. Contact us
If you have any questions about this policy, please contact:
TUZO HQ LTD
Email: [email protected]
Telephone: 07466 785266
WhatsApp: 07466 785266
Website: https://tuzohq.com
Registered office: 82a, James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
Company number: 17444620 (registered in England and Wales)