1. Zero Advertising Trackers Policy
ReguLex adheres to a strict institutional privacy principle: we do not utilize third-party advertising networks, behavioral tracking pixels (such as Meta Pixel or Google Ads), or data-broker profiling cookies.
2. Strictly Necessary Operational Cookies
We employ only strictly essential technical cookies required for application state, security authentication, and session persistence:
| Cookie Name | Type | Duration | Statutory Purpose |
|---|---|---|---|
regulex_session |
Strictly Necessary | Session (Browser Close) | Preserves practice authentication state and CSRF prevention token. |
__cf_bm |
Security / Operational | 30 minutes | Cloudflare bot mitigation and rate-limiting shield. |
practice_fee_pref |
Functional (Local) | 30 days | Retains practice advisory fee slider preference (£250 default). |
3. Consent Exemption under PECR
Because all cookies deployed by ReguLex are strictly necessary for the technical provision of the service requested by the user, explicit cookie consent banners are exempt under Regulation 6(4)(b) of the Privacy and Electronic Communications Regulations 2003.