HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 95723
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Set-Cookie: __RequestVerificationToken=PbnLuBpG8jMcpT4eYU7CIQr4gG0CV_3XVfaRuMc_Il27Co0MGS-0YueuMEst7URfLzX3cZgZWMROK-ml6u3fJ4C0sfa_jdPdX6hCgqHRjK41; path=/; HttpOnly
Set-Cookie: personalisationGroupsPagesViewed=1083; expires=Mon, 09-Sep-2019 10:47:28 GMT; path=/; HttpOnly
Set-Cookie: personalisationGroupsNumberOfVisits=1; expires=Mon, 09-Sep-2019 10:47:28 GMT; path=/; HttpOnly
Set-Cookie: personalisationGroupsNumberOfVisitsSessionStarted=1; path=/; HttpOnly
X-Frame-Options: SAMEORIGIN
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; script-src 'self' https: script.crazyegg.com 'unsafe-eval' 'unsafe-inline' *.constantcontact.com oss.maxcdn.com *.googleapis.com maxcdn.bootstrapcdn.com www.googletagmanager.com www.google-analytics.com www.google-analytics.com static.hotjar.com script.hotjar.com cdnjs.cloudflare.com i.simpli.fi *.gstatic.com *.youtube.com *.doubleclick.net  static.doubleclick.net s.ytimg.com www.googleadservices.com *.aspnetcdn.com pi-test.sagepay.com *.addthis.com *.addthisedge.com facebook.com *.facebook.com flexiengine.azurewebsites.net *.azureedge.net;        style-src 'self' https: 'unsafe-inline' maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com www.gstatic.com *.azureedge.net flexiengine.azurewebsites.net;        img-src 'self' data: gtrk.s3.amazonaws.com mlsvc01-prod.s3.amazonaws.com *.constantcontact.com www.google.com cdnjs.cloudflare.com www.google.co.uk www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net static.doubleclick.net www.gravatar.com i.simpli.fi *.gstatic.com *.googleapis.com maps.googleapis.com *.umbraco.tv umbraco.tv *.zopim.com *.cdn77.org flexiengine.azurewebsites.net *.azureedge.net;        font-src 'self' data: *.zopim.com maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com flexibookings.azurewebsites.net flexiengine.azurewebsites.net *.azureedge.net;        connect-src 'self' https: www.google-analytics.com www.google-analytics.com stats.g.doubleclick.net insights.hotjar.com pi-test.sagepay.com *.zopim.com wss://*.zopim.com;                 frame-src 'self' https: vars.hotjar.com *.youtube.com *.addthis.com flexibookings.azurewebsites.net tockify.com;        media-src 'self' gcs-vimeo.akamaized.net player.vimeo.com *.vimeocdn.com
X-UA-Compatible: IE=Edge
Access-Control-Allow-Credentials: true
Access-Control-Request-Headers: *
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Authorization, Origin, X-Requested-With, Content-Type, Accept, X-Token, x-custom-header, X-XSRF-TOKEN
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Strict-Transport-Security: max-age=31536000
Date: Tue, 11 Jun 2019 10:47:28 GMT