Website technologies
COOKIE POLICY
What the Academy website stores or accesses on your device, why it is used and how to exercise your choices.
Prepared 3 September 2026 · Review at least annually and whenever the service or law changes
The client-supplied organisation, controller, contact and retention details are now included. These policies remain a staging draft until HeadHunters approves the wording, confirms processor contracts and completes independent legal review.
What this policy covers
Cookies are small files, but UK rules also cover scripts, pixels, local storage and similar methods that store or access information on a device. Some technologies are essential for security, login or a service you request. Others require consent or must meet a narrow legal exception.
This policy applies to the public Academy website and its current staff-created login/profile preview. A future VLE, booking platform, video library or community feature requires a new technology scan and an updated notice before launch.
Technology categories
| Category | Purpose and default |
|---|---|
| Strictly necessary | Security, load balancing, login sessions, requested account functions and remembering privacy choices. These cannot be switched off where the service would not work without them. |
| Preferences and appearance | Remembering a display or accessibility preference. Where the legal appearance exception is used, clear information and a simple free objection must be available. |
| Aggregate statistics | Understanding visits, page use, device type and broad referral information only to improve the website. This is disabled until the approved privacy-first configuration and objection control are in place. |
| Marketing and advertising | Advertising pixels, cross-site tracking, profiling and ad-platform conversion sharing. These are disabled by default and must not run before valid consent. |
Our analytics approach
The recommended public-site tool is Plausible Analytics, configured for aggregate website improvement only and excluded from student login, dashboard and future private learning areas. It uses no cookies or persistent browser storage in its standard configuration, but the Academy will still explain the processing, sign an appropriate processor agreement and provide a simple free way to object.
Google Analytics, Meta Pixel, Google Ads conversion tags or any tool that links behaviour to advertising must remain blocked unless the visitor gives valid consent. Consent must be as easy to refuse or withdraw as it is to give.
Your choices
When the consent manager is commissioned, every page will provide a persistent “Manage privacy choices” control. It will allow visitors to reject or withdraw non-essential technologies without losing access to public content. Browser controls can also delete or block cookies, but disabling necessary login cookies will prevent account access.
To object to aggregate statistics before the control is available, email hello@headhunterssalon.co.uk. Analytics must not be enabled until that objection can be technically honoured.
Current inventory and change control
No advertising or behavioural analytics tool is approved for the Academy pages. WordPress and the hosting/security stack may use necessary technologies for administrators and logged-in users. The site currently requests the Bebas Neue typeface from Google Fonts; self-hosting it is recommended to reduce third-party requests.
A full cookie and storage scan must be completed after the final domain, analytics provider, maps, video embeds and consent manager are configured. The inventory must record provider, name, purpose, category, duration, access parties and any international transfer.