Cookie Policy

Last Updated: 29 November 2025

1. Introduction

This Cookie Policy explains how the Building Control Evidence Platform ("we", "us", or "our") uses cookies and similar tracking technologies when you use our Service. This policy should be read together with our Privacy Policy and Terms of Service.

By using our Service, you consent to the use of cookies in accordance with this policy. If you do not agree to our use of cookies, you should disable them by following the instructions in this policy or stop using the Service.

2. What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work more efficiently and to provide information to the website owners.

Cookies allow websites to:

  • Remember your login status and preferences
  • Track your navigation and usage patterns
  • Improve security and prevent fraud
  • Analyze website performance and user experience

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the Service to function properly. They enable core functionality such as security, authentication, and access to secure areas. The Service cannot function properly without these cookies, and they cannot be disabled.

Examples:

  • Authentication cookies: Remember that you are logged in as you navigate between pages
  • Session cookies: Maintain your active session and prevent unauthorized access
  • Security cookies: Detect authentication abuses and protect user data
  • CSRF tokens: Prevent cross-site request forgery attacks

Legal Basis: These cookies are necessary for the performance of our contract with you (providing the Service).

3.2 Functional Cookies

These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.

Examples:

  • Preference cookies: Remember your language, region, and display preferences
  • UI state: Remember collapsed/expanded sections, selected views, or filters
  • Notification settings: Remember your email notification preferences

Legal Basis: These cookies enhance your user experience and are based on our legitimate interest in providing a better service. You can disable these cookies through your browser settings.

3.3 Analytics and Performance Cookies

These cookies collect information about how you use the Service, helping us improve performance and user experience.

Examples:

  • Session tracking: Generate unique session IDs (stored in sessionStorage) to track user sessions
  • Page view tracking: Record which pages you visit and how long you spend on them
  • Event tracking: Track feature usage and user interactions
  • Error tracking: Identify technical issues and bugs (via Sentry, if enabled)

Data Collected:

  • Session IDs (anonymous, generated client-side)
  • Page URLs and referrer information
  • Event types and timestamps
  • Browser type and version
  • Device type and screen resolution

Legal Basis: Legitimate interest in improving the Service and understanding user behavior. All analytics data is anonymized where possible.

3.4 Marketing and Attribution Cookies

These cookies track how you found our Service and which marketing campaigns are most effective.

Examples:

  • UTM parameters: Track marketing campaign source (utm_source), medium (utm_medium), and campaign name (utm_campaign)
  • Referrer tracking: Record which website referred you to us
  • Landing page tracking: Track early access signups and conversions

Purpose: Help us understand which marketing channels are effective so we can improve our marketing and provide better content.

Legal Basis: Legitimate interest in marketing effectiveness and business development.

4. Third-Party Cookies

We use third-party service providers that may set their own cookies when you use our Service:

4.1 Stripe (Payment Processing)

Provider: Stripe, Inc.
Purpose: Process payments, manage subscriptions, prevent fraud
Cookies Set: Stripe sets cookies to enable payment processing, remember your payment preferences, and detect fraudulent activity
Type: Strictly necessary (for payment processing), functional, and security cookies
Privacy Policy: https://stripe.com/privacy
Cookie Policy: https://stripe.com/cookies-policy/legal

4.2 Vercel (Hosting and Infrastructure)

Provider: Vercel Inc.
Purpose: Host the Service, optimize performance, analyze infrastructure metrics
Cookies Set: Vercel may set cookies for performance monitoring, load balancing, and analytics
Type: Strictly necessary (infrastructure) and performance cookies
Privacy Policy: https://vercel.com/legal/privacy-policy

4.3 Sentry (Error Tracking)

Provider: Functional Software, Inc. (Sentry)
Purpose: Error monitoring, performance tracking, debugging
Cookies Set: Sentry may set cookies to track user sessions for error context
Type: Performance and analytics cookies
Privacy Policy: https://sentry.io/privacy/

Important: We do not control third-party cookies. Please review the privacy and cookie policies of these third parties to understand how they use cookies.

5. Session Storage and Local Storage

In addition to cookies, we use browser storage technologies:

5.1 Session Storage

Session storage is temporary storage that is cleared when you close your browser tab.

We use session storage for:

  • Analytics session IDs (unique identifiers for tracking your session, not linked to personal data)
  • Temporary UI state (form data, navigation state)
  • Short-lived authentication tokens

5.2 Local Storage

Local storage persists even after you close your browser.

We use local storage for:

  • User preferences (theme, language, display settings)
  • Draft content (to prevent data loss if connection is interrupted)
  • Recently viewed items

6. Cookie Duration

Cookies can be either "session cookies" or "persistent cookies":

6.1 Session Cookies

These are temporary cookies that expire when you close your browser. They are used for authentication and maintaining your active session.

6.2 Persistent Cookies

These remain on your device for a set period or until you manually delete them. We use persistent cookies for:

  • "Remember me" functionality: Up to 30 days
  • User preferences: Up to 1 year
  • Analytics: Up to 2 years (anonymized)
  • Marketing attribution: Up to 90 days

7. How to Manage Cookies

7.1 Browser Settings

Most web browsers allow you to control cookies through their settings. You can:

  • View which cookies have been set
  • Block third-party cookies
  • Block cookies from specific sites
  • Block all cookies
  • Delete cookies when you close your browser
  • Delete existing cookies

7.2 Browser-Specific Instructions

Google Chrome:

Settings → Privacy and security → Cookies and other site data
Chrome Cookie Settings

Mozilla Firefox:

Settings → Privacy & Security → Cookies and Site Data
Firefox Cookie Settings

Safari:

Preferences → Privacy → Cookies and website data
Safari Cookie Settings

Microsoft Edge:

Settings → Cookies and site permissions → Manage and delete cookies and site data
Edge Cookie Settings

7.3 Impact of Disabling Cookies

Please note that blocking or deleting cookies may impact your experience:

  • Essential cookies: The Service will not function properly without these
  • Functional cookies: You may need to re-enter preferences each time you visit
  • Analytics cookies: We won't be able to improve the Service based on usage data
  • Payment cookies: Payment processing may not work

7.4 Do Not Track

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Currently, there is no industry standard for how to respond to DNT signals. We do not currently respond to DNT signals, but we only use cookies as described in this policy.

8. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our practices. We will notify you of any material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by email or through a notice on the Service.

We encourage you to review this Cookie Policy periodically.

9. Contact Us

If you have questions or concerns about our use of cookies, please contact us:

Email: privacy@buildingcontrolevidence.com
Address: [Your Company Address]

Last Updated: 29 November 2025

This Cookie Policy complies with UK GDPR and the Privacy and Electronic Communications Regulations (PECR).