• Strictly necessary (essential): to run the Site, keep you logged in, secure the service, and deliver requested functionality. Legal
basis: PECR necessity (consent not required).
• Preferences & personalisation (non-essential): to remember choices and enhance experience. Legal basis: consent.
• Analytics & performance (non-essential): to understand usage and improve the Site (e.g., page views, errors). Legal basis:
consent.
• Advertising & measurement (non-essential): to measure the effectiveness of campaigns and, where applicable, deliver/limit
personalised ads. Legal basis: consent (note: under IAB TCF v2.2, personalisation requires consent).
We never set non-essential cookies unless you Accept them. You can Reject all non-essential cookies or manage granular choices
at any time.
On your first visit, our banner presents Accept all, Reject all, and Manage settings with equal prominence. You can change or
withdraw consent anytime via [Manage Cookies] (link or button visible in the footer). We honour your choices for [X months;
recommend 6–12] before asking again. We maintain records of consent to demonstrate compliance.
_cf_
_pk_id.* / _pk_ses.*
_ga / _gid
_gcl_au
_fbp
Cloudflare
Matomo
(consent mode)
Google Ads
Meta
Security & load balancing
Analytics
90d
90d
You can also block/delete cookies via your browser. This may affect site functionality. See support pages for Chrome, Safari, Edge,
Firefox, Opera, Android, iOS etc. (or link to your help page).
We may update this policy; we’ll revise the “Last updated” date and post changes here. Material changes may be highlighted on the
banner or a site notice.
• Title: We value your privacy
• Body (one line): We use essential cookies to run our site. With your consent, we’ll also use analytics and (where applicable)
advertising cookies to improve your experience.
• Buttons: Accept all | Reject all | Manage settings (equal prominence, no pre-ticked categories)
• Toggle groups: Essential (always on), Preferences, Analytics, Advertising.
• Short, plain-English explanations + provider list + links to vendor privacy notices (and IAB vendor list if used). (OneTrust)
1. Scan your site (production) to produce the exact cookie table and durations.
2. Configure your CMP to show Accept all / Reject all / Manage on the first screen (equal weight). (Information Commissioner’s Office)
3. Ensure non-essential cookies fire only after consent (test tag sequencing). (EDPB)
4. Set consent renewal to 6–12 months and store proof of consent. (Hunton Andrews Kurth)
5. If using ad tech/Google: align with TCF v2.2 and update vendor disclosures. (OneTrust)
6. Add a persistent “Manage Cookies” link in the footer.
7. Update Privacy Policy to reference cookies/legal bases and third-country transfers.
8. Publish this policy with a new Last updated date.
1. None
DOI: file_00000000116c61f4bbad307276b119a4






