Cookie Policy

  1. What this Policy covers
    This Policy explains how Auctralytix uses cookies, local storage, session storage and similar storage/access technologies on auctralytix.com and app.auctralytix.com.


  2. Strictly necessary technologies
    The current application specification identifies authentication/session and cross-site request-forgery protection technologies as strictly necessary to provide login, security and session functionality. These may be set without consent where the PECR strictly-necessary exemption applies. Examples to verify before publication: refresh/session token; CSRF token; security or load-balancing cookie where technically essential. Insert the exact cookie name, provider, purpose and expiry once confirmed from production.


  3. Analytics and optional technologies
    If the marketing website uses Cloudflare Web Analytics or any other analytics technology that stores or accesses information on a user's device and is not covered by a statutory exception, it must not be activated until the required consent has been obtained. If Google Analytics, Meta Pixel, advertising technology, session replay, heatmaps or similar tools are introduced, update this Policy and the consent mechanism before deployment.


  4. Cookie table - production values required
    Before launch, publish a table containing: cookie/technology name; provider; purpose; category; first/third party status; duration; and whether consent is required. Do not publish guessed cookie names.


  5. Consent controls
    Where consent is required, it must be freely given, specific, informed and signified by an unambiguous positive action. Non-essential technologies must remain off until consent. Rejecting optional cookies must be as easy as accepting them, and consent must be capable of withdrawal.


  6. Managing cookies
    Users may adjust consent preferences through the site's cookie controls where available and may also use browser controls. Blocking strictly necessary cookies may prevent login or security features from working.


  7. Auctralytix does not currently use advertising cookies on its public marketing website. Cloudflare Web Analytics, as presently deployed and measured by Auctralytix, does not store or access information on the visitor's device.

    Auctralytix does, however, use Cloudflare Turnstile to protect registration and other interactive forms against automated abuse. Turnstile may store or access a device identifier, including a local-storage entry such as cf.turnstile.u, through Cloudflare infrastructure. We treat this storage/access as strictly necessary for the secure provision of the form requested by the user and therefore do not request consent for it. It is not used by Auctralytix for advertising or behavioural profiling.


  8. Changes and contact
    This Policy will be updated when technologies or providers change. Contact: support@auctralytix.com.

    Document preparation and professional support

    Document preparation support. This document has been prepared with legal and compliance consultancy support from Admiral Strategic Consulting Ltd, a company registered in England and Wales under company number 16088287, registered office: 95 Hounslow Road, Hanworth, Feltham, England, TW13 6QA. Specialist legal matters may be referred to independent qualified solicitors and other professional advisers through the relevant professional network where appropriate. This attribution does not constitute FCA authorisation, regulatory approval or certification by a solicitor.

    Key legal and regulatory references

    The following references inform this draft. They are not an exhaustive statement of law and should be checked again immediately before launch.

    • UK GDPR, including Articles 5, 6, 12-22, 28, 32 and 33-34, as amended and supplemented by applicable UK data-protection legislation.

    • Data Protection Act 2018.

    • Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended.

    • ICO guidance on the right to be informed, privacy notices, cookies and similar technologies, direct marketing, processors and individual rights.

    • ICO: Cookies and similar technologies; Cookies and privacy notices in detail; Guidance on storage and access technologies.

    • PECR regulation 6 and the strictly necessary exemption, as amended.

    Version control

    Effective date: 12 August 2026. This document supersedes earlier Auctralytix versions of the same subject.