You will notice there is no banner.

This website sets no cookies of its own. No analytics. No advertising. No social-media pixels. No session recording. No local storage. Nothing on this site follows you, remembers you, or reports your visit to anyone — including to us.

That is why there is no consent banner. Under the EU ePrivacy Directive, the UK PECR and equivalent regimes, consent is required for non-essential storage and tracking. When there is none, asking for consent would be theatre. We would rather not perform it.

The site is served through Cloudflare's network. If Cloudflare's security layer ever issues you a challenge (for example, during a bot or attack mitigation event), it may set a strictly necessary security cookie such as cf_clearance. Its purpose is to prove you passed the check so you are not re-challenged on every page.

Outside a security event, no cookies are set at all. You can verify this in your browser's developer tools on any page.

• HTML, stylesheets and images — served from this site's own domain.
• Typeface files (Open Sans) — hosted on this domain. No request is made to Google Fonts or any other third party, so your IP address is never disclosed to a font provider (the issue that has made headline GDPR case law elsewhere).
• External links — civic entries link to external publications and testimonials link to LinkedIn profiles. Those destinations have their own privacy and cookie practices, disclosed on arrival; this site sets nothing when you merely follow a link.

There are no iframes, no embedded video, no social widgets and no scripts from third parties anywhere on the site.

If this practice ever adds measurement to this website, it will be done in one of two ways, and this statement will be updated first:

• a cookieless, aggregate method that stores no identifier and processes no cross-site data — which requires no consent banner; or
• conventional measurement behind prior, granular, opt-in consent — equally weighted accept and reject, with no dark patterns and refusal costing you nothing.

What will never happen: a consent banner that is actually a wall, pre-ticked boxes, or a "reject" button hidden three clicks deep. Those practices are legal exposure dressed as compliance, and they would be beneath a practice built on trust.

You remain in control of your own browser regardless of anything this site does or does not set: every mainstream browser lets you block or delete cookies, browse privately and inspect what any site stores. Because this site sets nothing by default, those settings will cost you nothing here.

Questions about this statement: ptk@bak-lok.com. The broader privacy account is in the Privacy statement.

Effective date: 13 September 2026.