Cookie Notice

ConductPath uses a minimal set of cookies and similar technologies (collectively, "cookies"). This Notice explains what we set, why, and how you can control them. It should be read alongside our Privacy Notice.

Under regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR), we set non-essential cookies only with your prior consent. Under the UK GDPR, that consent must be freely given, specific, informed, and unambiguous, and it can be withdrawn at any time.

1. What is a cookie?

A cookie is a small text file placed on your device by a website. Similar technologies include local storage, session storage, pixels, and device fingerprinting. In this Notice we refer to all of these as "cookies".

2. Cookies we set

2.1 Strictly necessary (no consent required)

• sb-*-auth-token / sb-refresh-* — authentication and session management. Placed by our authentication provider. Expires when you sign out or after up to 30 days of inactivity. Without these, sign-in is not possible.
• cp_csrf — cross-site request forgery protection. Session cookie.
• cp_consent — remembers your cookie preferences so we don't ask again on every visit. 12 months.

2.2 Analytics (opt-in)

With your consent, we set a small number of first-party analytics cookies to understand aggregate usage of the marketing site (which pages are viewed, how visitors flow through the site). We do not use these cookies to build profiles for advertising, and we do not share the data with third-party ad networks. You can withdraw consent at any time via the "Manage cookies" link in the footer.

2.3 Advertising / third-party tracking

We do not set advertising cookies, remarketing pixels, or third-party social-media trackers.

3. How to manage cookies

• Use the "Manage cookies" link in the footer to change your analytics consent at any time.
• You can clear or block cookies in your browser settings — see the ICO's guidance at ico.org.uk/for-the-public/online/cookies.
• Blocking strictly-necessary cookies will prevent sign-in and core functions from working.

4. Do Not Track and Global Privacy Control

There is currently no consistent industry standard for Do Not Track (DNT) or Global Privacy Control (GPC). Where your browser sends a GPC signal, we treat it as a withdrawal of analytics consent for that browser.

5. Changes to this Notice

We may update this Notice from time to time to reflect changes in cookies used or regulatory guidance. The date at the top reflects the most recent revision.

6. Contact

Questions about cookies: privacy@conductpath.co.uk. You may also complain to the UK Information Commissioner's Office at ico.org.uk.