Cookie policy

Cookies are small text files a website stores in your browser. This page lists every cookie flowbox.my sets, why, and how you stay in control. It is a short read because we use very few.

1. Strictly necessary cookies

These are required for the site to function and do not need consent:

• PHP session cookie (PHPSESSID) — set when you visit a page, used to protect our contact form against cross-site request forgery. It contains a random identifier only, holds no personal details, and expires when you close your browser.
• Consent record (cookieconsent_status) — remembers whether you pressed Accept or Reject on the cookie banner, so we do not ask you on every page. Kept for 12 months.

2. Optional cookies

If you press Accept on our banner, we may enable basic, privacy-respecting usage measurement to understand which pages help visitors most. If you press Reject, no optional cookies are set and the site works identically. We use no advertising, remarketing or cross-site tracking cookies in either case.

3. Third-party content

Some site features load resources from third parties: Google Fonts serves our typefaces and Cloudflare's CDN serves the cookie banner script. These requests expose your IP address to those providers as a technical necessity of the web, but we have configured the site so that they do not set tracking cookies of their own. Links to WhatsApp open the WhatsApp service, which applies its own policies once you are there.

4. Changing your mind

You can revisit your choice at any time — the "Cookie Choices" link in the footer of every page reopens the consent banner. Your new selection replaces the old one immediately.

5. Controlling cookies in your browser

Every modern browser lets you view, block and delete cookies site-by-site under its privacy settings. Blocking our strictly necessary cookies will prevent the contact form from submitting, but the rest of the site will still browse normally.

6. Questions

Anything unclear, or spotted a cookie we have not documented? Tell us at [email protected] and we will investigate and update this page. Our broader data handling practices are described in the privacy policy.