Compliance & PECR
Cookie Policy
How NEXACT LTD uses cookies and telemetry technologies under the UK Privacy and Electronic Communications Regulations (PECR).
Manage Your Cookie Preferences
You can change or withdraw your consent for non-essential cookies at any time. Your preferences are saved immediately across all pages.
1. What Are Cookies?
Cookies are small text files that are stored on your device (computer, smartphone, or tablet) when you visit a website. They are widely used by modern web platforms to make websites work properly, provide secure navigation, remember your preferences, and report aggregated performance metrics to site owners.
In addition to standard HTTP cookies, modern web applications may utilize browser storage mechanisms such as localStorage to store preferences client-side without sending them across network headers on every request.
2. Legal Basis Under UK Law (PECR & UK GDPR)
Under Regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) and the UK GDPR:
- Strictly Necessary Cookies do not require user consent because they are technically essential to provide the service requested by the user (such as maintaining a secure session, CSRF protection, and recording your cookie preference).
- Non-Essential Cookies (such as Google Analytics 4 performance telemetry) require clear, unambiguous, affirmative opt-in consent before being set on your device.
NEXACT complies with Google Consent Mode v2. If you reject non-essential cookies, analytics storage is denied and no identifying cookies are written to your device.
3. Audit of Cookies Used on www.nexact.co.uk
The table below provides a complete audit of all cookies and local storage tokens utilized by our website:
Category 1: Strictly Necessary (Always Active)
| Identifier | Provider | Purpose | Lifespan |
|---|---|---|---|
| nexact_cookie_consent_v1 | NEXACT (First Party) | Stores your explicit cookie consent selections (necessary, analytics, functional) so you are not repeatedly prompted. | 12 months |
| sb-*-auth-token | Supabase (First Party) | Authenticates secure team access to the authenticated workspace and protects sensitive project operations. | Session / 7 days |
| __cf_bm / cf_clearance | Cloudflare | Bot management, DDoS mitigation, and firewall routing to defend against automated spam. | 30 minutes |
Category 2: Performance & Analytics (Optional / Consented)
| Identifier | Provider | Purpose | Lifespan |
|---|---|---|---|
| _ga | Google Analytics 4 (G-BC51PS8GLQ) | Distinguishes unique users across sessions to compile anonymous, aggregated reports on visitor counts. | 2 years (or 14 months) |
| _ga_BC51PS8GLQ | Google Analytics 4 | Maintains session state and measures engagement metrics on specific page paths. | 2 years |
| _gtm_debug / gtm | Google Tag Manager (GTM-NZGXWT9K) | Coordinates tag firing logic and event dispatcher under consented Google Consent Mode v2 rules. | Session |
4. Managing Cookies in Your Browser
In addition to our on-page consent manager, most modern web browsers allow you to manage cookie settings directly:
- Google Chrome: Settings > Privacy and Security > Third-party cookies
- Apple Safari: Settings > Safari > Advanced > Privacy > Block all cookies
- Mozilla Firefox: Settings > Privacy & Security > Enhanced Tracking Protection
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies
Please note that disabling strictly necessary cookies through browser settings may degrade your user experience or prevent certain interactive parts of the website from operating correctly.
5. Questions & Contact
If you have questions about our use of cookies or privacy practices, please contact:
NEXACT LTD · Newport, Wales, United Kingdom
Email: [email protected]