Cookie statement
DRAFT. This document was prepared from public ICO template guidance and has not been reviewed by a lawyer. It must receive legal review before being treated as published policy.
The cookies this site sets
ABMS sets exactly one kind of cookie: the authentication session for signed-in staff, stored as one or more cookies named with the prefix sb- (set by our authentication provider, Supabase). They exist so that a signed-in person stays signed in, and they are removed on sign-out. They are strictly necessary for the service: the authenticated application cannot function without them.
We set no analytics cookies, no advertising cookies, and no third-party tracking cookies. Our error monitoring (Sentry, when enabled) does not set cookies.
Why there is no cookie banner
UK law (PECR) requires consent for cookies that are not strictly necessary for a service the user has requested. Strictly necessary cookies, such as an authentication session, are exempt. Because that is the only kind we set, a consent banner would ask permission for nothing, so we do not show one. If we ever introduce cookies that need consent, this statement and the site’s behaviour will change first.
Last updated: 28 August 2026 (draft).