Version 2.0 · 26 August 2026
Cookie Policy
1. Scope
This policy explains how The Big Health Community uses cookies and similar storage or access technologies on the public website and portal.
2. Current approach
Our current intended configuration does not use Google Analytics, advertising pixels, behavioural advertising, heatmaps, session replay or marketing-tracking cookies. MonsterInsights, OptinMonster and Jetpack are inactive.
We use WordPress and related hosting/security technologies necessary to operate the website, authenticate authorised users, protect sessions, prevent abuse and maintain site security.
3. Strictly necessary technologies
Strictly necessary cookies or similar technologies may be used for:
- customer and administrator authentication;
- session continuity and logout;
- security, fraud prevention and abuse detection;
- load balancing, hosting and network protection;
- form security and anti-spam measures;
- remembering a user’s explicit request where technically necessary to provide the service.
These technologies may be set without consent where the applicable legal exemption applies because they are necessary to provide a service requested by the user or for another recognised exempt purpose. We still provide information about their use.
4. Login
WordPress may use login and session cookies when an authorised customer signs in. A persistent authentication cookie may be used where the user selects a remember-me or equivalent option. Signing out removes or invalidates the relevant authentication session.
5. Forms and security
Contact and account forms may use technical security controls such as nonces, session data, honeypots, server logs or similar measures to prevent forgery, spam and abuse. These are used for security and are not intended for behavioural advertising.
6. Third-party service providers
Hosting, security, email-delivery and other technical providers may process network or device information as part of providing the website. A provider may use its own strictly necessary technologies under its own terms. Where a provider introduces non-essential storage or access technology, we will review the legal basis, transparency requirements and consent controls before enabling it.
7. Non-essential analytics or marketing
If we introduce analytics, advertising, personalisation or other non-essential storage or access technologies in future, we will update this policy and implement any consent mechanism required by applicable law before those technologies are activated for users who have not consented.
8. Consent and withdrawal
Where consent is legally required, it must be freely given, specific, informed and based on a clear affirmative action. Users must be able to refuse non-essential technologies as easily as they can accept them and must be able to withdraw consent without detriment.
9. Cookie and storage audit
Exact cookie names, providers and durations can vary with WordPress, the hosting platform, security configuration and installed plugins. We will review cookies, local storage, session storage and other relevant storage or access technologies before final public launch and after material technical changes. The live list will be updated where necessary.
10. Browser controls
Most browsers allow users to block or delete cookies. Blocking strictly necessary cookies may prevent login, forms, security controls or other requested website functions from operating correctly.
11. Changes
We may update this policy when our website, providers, technologies or legal requirements change. The current version and date will be shown on this page.
PDPR