Necessary technologies
Technologies required for security, sign-in, language preferences and essential site functions may be used without consent where permitted.
Analytics and marketing
Non-essential analytics, personalisation or marketing technologies must not be activated until the visitor has given valid consent. Visitors must be able to reject them as easily as accepting them and later withdraw consent.
Cookie list
The production site must publish an automatically maintained list of cookie name, provider, purpose, category and expiry period. This list cannot be completed reliably until all production services are connected.
Manage consent
The production site must provide a permanent link for reviewing or withdrawing cookie consent. Browser controls may also delete stored cookies, but they do not replace the site consent controls.