Cennox Cookie Policy

This Cookie Policy explains how Cennox uses cookies and similar technologies on our websites, platforms, and applications. It sets out what cookies are, the types we use, and how you can manage your preferences.

We are committed to protecting your privacy and ensuring transparency in line with the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and the Data Use and Access Act 2025 (DUAA 2025).

What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They allow us to:

• Make our website work properly and securely
• Improve your user experience
• Analyse how our services are use
• Provide relevant marketing (with your consent)

Some cookies are essential, while others are optional.

Types of Cookies We Use
Strictly Necessary Cookies

These cookies are essential for the operation of our website. Without them, you would not be able to use certain services or features.

• Login and authentication
• Security and fraud prevention
• Service continuity (e.g., keeping items in a shopping basket)

Consent is not required for these cookies.

Functional and Analytics Cookies

These cookies help us understand how people use our website and improve performance. They also support user preferences, such as language or region.

Examples include:

• Measuring site performance and visitor numbers
• Monitoring technical errors
• Remembering user settings

Under DUAA 2025, consent is not required for analytics and functionality cookies, provided they are non-intrusive. However, we will always be transparent about their use.

Marketing and Tracking Cookies

These cookies record your online activity to help deliver advertising that is relevant to you. They may also be set by third-party providers such as social media platforms.

Examples include:

• Personalised advertising campaigns
• Social media “like” and share buttons
• Tracking pixels for campaign performance

Consent is required before these cookies are set.

Legal Basis for Using Cookies

• Strictly necessary cookies: our legitimate interest in operating a secure, functional website.
• Functional/analytics cookies: permitted under DUAA 2025 without consent but subject to transparency.
• Marketing/tracking cookies: based on your consent, which you can withdraw at any time.

Managing Your Cookie Preferences

• On your first visit, you will see a cookie banner allowing you to accept, reject, or customise optional cookies.
• You can update your preferences at any time by clicking “Cookie Settings” on our website.
• You may also adjust your browser settings to block or delete cookies, though some site functions may not work properly.

Cookie Duration

• Session cookies – deleted when you close your browser.
• Persistent cookies – remain on your device for a set period (up to 12 months) unless you clear them sooner.

• Third-party cookies – subject to the provider’s policies (e.g., Google, Meta).

Third-Party Cookies

Some cookies are set by third parties to provide services such as analytics, advertising, and social media integration. These third parties may process your data outside the UK. Cennox ensures that all international data transfers comply with DUAA 2025 requirements — i.e., that protections are not materially lower than those in the UK.

Your Rights

You have the right to:

• Withdraw consent for marketing/tracking cookies at any time
• Access further details about cookies in our Privacy Policy
• Complain to Cennox’s Data Protection Officer compliance@cennox.com
if you have concerns
• Escalate unresolved complaints to the Information Commissioner’s Office (ICO)

Updates to This Policy

We may update this Cookie Policy to reflect changes in technology, law, or our business practices. Significant updates will be communicated on our website.

Contact Us

If you have any questions about this policy or how we use cookies, please contact:

Data Protection Officer
Cennox
compliance@cennox.com

This version makes it clear which cookies do and don’t require consent under DUAA 2025, covers international transfers, and builds in ICO escalation rights.