Cookie and storage notice
Necessary security technologies are distinguished from optional preferences, analytics and marketing. Optional technologies stay off unless a visitor chooses them.
Current technology register
The public application uses a consent record in browser storage. Secure forms and portals may use first-party CSRF and session cookies when those services are requested. No analytics, advertising, social pixel or marketing tag is enabled in the current candidate.
- np_cookie_consent: preference record, 180 days
- np_csrf: necessary form and portal security, 1 hour
- np_session: authenticated secure session, inactivity and absolute limits
Your choices
The first layer provides Accept all, Reject non-essential and Manage preferences. Optional categories are off by default. Cookie settings can be reopened from every page, and rejecting optional technologies does not block ordinary public content.
Audit and future changes
Source, response headers, storage and network requests are reviewed before release. Any future analytics or marketing provider requires a documented purpose, recipient, duration, transfer assessment and consent behaviour before activation.
ICO guidance on storage and access technologies