Cookie Policy

1. What cookies are

Cookies are small text files placed on your device by a website. They allow the site to recognise your browser between requests, which is necessary for functions such as keeping you signed in.

2. Strictly necessary cookies

This website uses only strictly necessary cookies. These are required for the site to function and cannot be disabled without preventing access to secure areas.

• Session cookie — maintains your authenticated session in the client portal. HttpOnly, SameSite=Lax, secure in production. Expires after fourteen days or on sign-out.
• Security cookie — used for request validation and abuse protection. Expires at the end of the browser session.

3. Analytics

Where analytics are enabled, they are configured to collect aggregate usage data without cross-site tracking, and no analytics cookie is set without your consent where consent is legally required.

4. Third-party cookies

Our payment processor may set cookies within its own embedded checkout for fraud prevention and session integrity. These are governed by the payment processor’s own cookie and privacy policies.

5. Managing cookies

Most browsers allow you to refuse or delete cookies through their settings. Blocking strictly necessary cookies will prevent you from signing in to the client portal.

6. Changes

If we introduce additional cookie categories, this policy will be updated and, where required, consent will be requested before any non-essential cookie is set.