Cookie Policy

Last updated: 8 April 2026

This Cookie Policy explains how we use cookies and similar tracking technologies on our website.

This policy also supports our Information Security Management System (“ISMS”) by ensuring that personal data processed through cookies is appropriately identified, assessed, controlled, and monitored in accordance with UK data protection laws and applicable privacy regulations.

Cookies may collect information such as browser type, operating system, IP address, device type, approximate location, visit timestamps, language preferences, and pages viewed.

Cookies are small text files stored on your device when you visit a website. They may be placed by us (first-party cookies) or by approved third parties (third-party cookies).

Cookies can be:

• Session-based cookies – deleted when you close your browser
• Persistent cookies – stored on your device for a defined period or until deleted

We may also use similar technologies such as local storage or session storage, which function similarly to cookies and may be used by embedded third-party services.

We classify cookies based on their purpose and potential privacy impact.

3.1 Strictly Necessary Cookies

• Required for the website to function correctly (e.g., security, session management, and cookie consent preferences)
• Do not require user consent but are documented and reviewed as part of our ISMS

3.2 Functional Cookies

• Enable enhanced features such as remembering user preferences
• These cookies are only activated after you provide consent

3.3 Analytics and Performance Cookies

• Help us understand how visitors use the website (e.g., pages visited, time spent on the site, and navigation paths)
• May collect IP address and device information
• These cookies are only activated after you provide explicit consent

3.4 Marketing and Social Media Cookies

• Set by advertising networks or embedded social media platforms (e.g., YouTube, X/Twitter, Facebook, TikTok, and LinkedIn)
• Used to track browsing behaviour and build interest profiles
• Always require explicit consent and are subject to supplier risk assessment procedures

Depending on the cookie type, the following personal data may be collected:

• IP address and approximate location
• Device type, operating system, and browser type
• Date and time of website visits
• Pages viewed and links clicked
• Language settings and preferences
• Time spent on the website

• Non-essential cookies are only activated after you provide explicit, granular consent through our cookie banner
• You may withdraw consent at any time using the “Manage Cookies” link on our website
• Consent records may be retained for compliance and audit purposes

Some cookies are set by third-party providers. These providers may process your personal data in accordance with their own privacy notices and policies.

Some third-party providers may process personal data outside the United Kingdom or European Economic Area (“EEA”).

We are not responsible for the privacy practices, content, or policies of external websites linked from our website.

7.1 Risk Assessment

All cookies and tracking technologies are included within our risk assessment processes, including assessment of:

• Personal data processing risks
• Data leakage risks
• Third-party script risks
• Cross-site tracking risks
• Regulatory compliance risks

7.2 Controls Implemented

We maintain appropriate technical and organisational controls, including:

• A consent management platform (“CMP”) with granular consent controls
• Supplier vetting and contractual safeguards
• Regular script and tracking technology reviews
• Blocking of unauthorised third-party scripts
• Logging and monitoring of cookie-related events
• Periodic internal audits

7.3 Continuous Improvement

Cookie usage is reviewed periodically and following significant website changes, consistent with our continuous improvement cycle.

You can modify or withdraw your cookie preferences at any time using our cookie preference management tool.

You may also delete cookies or local storage items through your browser settings.

Cookie data is retained only for as long as necessary to fulfil its intended purpose.

Persistent cookies have defined expiry periods documented within our internal cookie management records.

We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our ISMS.

Any updates will be published on this page together with an updated revision date.

If you have any questions about this Cookie Policy or our Information Security Management System, please contact our Data Protection and Information Security Team at:

[email protected]