Cookie and tracking notice

Canonical artefact metadata

Owner

CyberSec Legal and Trust Office

Approver

CyberSec Executive Governance

Version

1.0.0

Last reviewed

2026-04-20

Next review due

2026-10-20

Cookie categories

• Strictly necessary: authentication, security, and session continuity.
• Performance/analytics: service measurement and UX improvements.
• Marketing/third-party: campaign attribution and ad network integrations where enabled.

Consent model

Non-essential cookies should be disabled by default until user consent is captured. Essential cookies may run without prior opt-in where necessary for secure operation.

How to manage preferences

Users can manage non-essential cookie preferences through CyberSec cookie settings where presented and through browser-level cookie controls. Where third-party analytics or campaign tags are active, CyberSec identifies the provider in the deployed notice or consent tooling.