A UK-based technology news website has updated its Cookie Policy, with the latest version dated 4 June 2025. The policy applies specifically to citizens and legal permanent residents of the United Kingdom. It sets out how the website uses cookies and other related technologies, including scripts and web beacons, and explains the categories of cookies, the third-party vendors involved, the consent process, and the rights of users under UK data protection law.

Key Facts at a Glance

• The Cookie Policy was last updated on 04/06/2025 and applies to UK citizens and legal permanent residents.
• The website uses cookies and related technologies; third parties also place cookies.
• Cookies are small files stored by the browser; scripts are program code; web beacons are invisible elements used to monitor traffic.
• Cookie categories include technical or functional cookies, statistics cookies, advertising cookies, marketing/tracking cookies, and social media cookies.
• Functional cookies may be placed without consent; statistics, advertising, and marketing/tracking cookies require consent.
• Social media content from Facebook, LinkedIn, and X (formerly Twitter) is embedded, and these companies are located in the United States.
• The policy lists numerous placed cookies from vendors such as Google various services, CloudFlare, Criteo, Google Analytics, PHP, Complianz, One Signal, Google reCAPTCHA, WordPress, Stripe, HubSpot, Hotjar, Facebook, Google Fonts, Twitter, LinkedIn, Google Ads Optimization, Google Ads, Snowplow, Elementor, and miscellaneous unidentified cookies.
• Users are shown a pop-up on their first visit and can save preferences; consent can be managed later, though JavaScript-disabled AMP pages use a manage consent button.
• The policy references a TCF vendor list when JavaScript is enabled, and it describes consent and legitimate interest options for statistics and marketing purposes.
• Users can enable, disable, or delete cookies through their internet browser, but the website may not work properly if all cookies are disabled.
• User rights include access, rectification, erasure, revocation of consent, data portability, and the right to object; complaints can be made to the Information Commissioner's Office (ICO).
• The policy includes contact details for data protection inquiries and states it was synchronised with an external cookie database on 05/08/2026.

Background: Why Cookie Policies Matter in the UK

Cookie policies are a key part of compliance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR). PECR implements the ePrivacy Directive in the UK and sets specific rules for storing information on a user's device, including cookies. Under PECR, organisations must obtain consent before placing non-essential cookies, unless the cookie is strictly necessary for a service requested by the user. The UK GDPR adds further requirements for lawful processing, transparency, and individual rights. The Information Commissioner's Office (ICO) is the supervisory authority responsible for enforcing these rules.

The updated policy reflects the typical structure of a modern consent management framework. It distinguishes between functional cookies, which do not require consent because they are necessary for the website to operate, and statistics, advertising, and marketing/tracking cookies, which require affirmative consent. This distinction is important because regulators have increasingly focused on cookie banners that do not offer a genuine choice, that use pre-ticked boxes, or that make it harder to reject cookies than to accept them. The policy describes a pop-up where users click 'Save preferences' to consent to selected categories, which suggests a granular consent mechanism.

What Are Cookies, Scripts, and Web Beacons?

The policy explains that a cookie is a small simple file sent along with pages of the website and stored by the browser on a computer or other device. The information stored in the cookie may be returned to the website's servers or to third-party servers during a subsequent visit. Scripts are pieces of program code used to make the website function properly and interactively; this code is executed on the server or on the user's device. A web beacon, also called a pixel tag, is a small, invisible piece of text or image on a website used to monitor traffic. Various data about the user is stored using web beacons. These definitions are standard, but they matter because they cover not only cookies but also other local storage and tracking technologies.

Categories of Cookies Used

Technical or Functional Cookies

Functional cookies ensure that certain parts of the website work properly and that user preferences remain known. The policy states that these cookies make it easier to visit the website, so users do not need to repeatedly enter the same information, and items can remain in a shopping cart until payment. Functional cookies may be placed without consent because they are necessary for the service. Examples in the policy include cookies from WordPress, Stripe, CloudFlare, PHP, Complianz, and Google reCAPTCHA. These cookies support logins, payment fraud prevention, content distribution, cookie consent management, and spam protection.

Statistics Cookies

Statistics cookies are used to optimise the website experience for users. They provide insights into how the website is used. The policy states that permission is requested to place statistics cookies. Vendors include Google Analytics, HubSpot, Hotjar, Snowplow, Elementor, and others. These cookies may collect data such as pageviews, unique user IDs, session IDs, and anonymised statistics. For example, Google Analytics cookies store and count pageviews, while Hotjar provides heat maps and screen recordings. Statistics cookies help publishers understand which content is popular, how users navigate, and where improvements are needed.

Advertising Cookies

Advertising cookies enable personalised advertisements and provide insights into campaign results. The policy explains that this happens based on a profile created from clicks and surfing on and outside the website. A unique ID links the website visitor to a profile, so the same ad is not shown more than once. Because these cookies are marked as tracking cookies, permission is requested. Advertising cookies may be placed by Criteo, Google Ads, Google Ads Optimization, Facebook, LinkedIn, and others. They support remarketing, ad delivery, retargeting, and campaign measurement.

Marketing/Tracking Cookies

Marketing or tracking cookies are cookies or any other form of local storage used to create user profiles to display advertising or to track the user on this website or across several websites for similar marketing purposes. These cookies are subject to consent. The policy lists marketing cookies from many providers, including Google various services, Criteo, One Signal, HubSpot, Facebook, Twitter, LinkedIn, and Google Fonts. Some cookies, such as those from Facebook, store and track visits across websites, store last visit, store account details, provide ad delivery, and prevent fraud. Others, such as One Signal, support push notifications and store whether a user has opted out.

Social Media

The website includes content from Facebook, LinkedIn, and X (formerly Twitter) to promote web pages, such as like or share buttons, or to share content on social networks. This content is embedded with code derived from those companies and places cookies. The policy notes that this content might store and process certain information for personalised advertising. Facebook, LinkedIn, and X are located in the United States, which means data may be transferred outside the UK. International transfers are a significant compliance issue under UK GDPR, and organisations must ensure appropriate safeguards are in place.

Placed Cookies and Vendors

The policy provides a detailed inventory of placed cookies. It groups them by vendor and category. For example, Google various services includes a functional cookie called google_auto_fc_cmp_setting, which stores cookie consent preferences, and a marketing cookie called __gpi. CloudFlare includes functional cookies such as mirage_cache_manifest and __cf_bm, the latter used to read and filter requests from bots. Criteo includes a marketing cookie called cto_bundle, which provides functions across pages, and several cookies pending investigation. Google Analytics includes statistics cookies such as _ga_, _gid, _ga, and _gat_gtag_UA_, which store and count pageviews or store a unique user ID. PHP includes a functional cookie called exp, which provides functions across pages. Complianz includes numerous functional cookies, such as cmplz_tcf_consent, cmplz_ac_string, cmplz_cookie_data, cmplz_user_data, cmplz_id, cmplz_consented_services, cmplz_functional, cmplz_saved_services, cmplz_policy_id, cmplz_marketing, cmplz_preferences, cmplz_banner-status, cmplz_saved_categories, and cmplz_stat

Source: UKTN News