ImpactMiles
← Governance framework
Data & Privacy

Cookies and Tracking Technologies Policy

Categories of cookies and similar technologies used across ImpactMiles surfaces, and how consent is obtained and recorded.

Version
v1.0
Effective
2026-07-19
Last reviewed
2026-07-19
Next review
2027-07-19
Owner
Data Protection Officer
Approver
Executive Team
Anchored by content hashissued 2026-07-29
Payload hash
c14c36f445ada149e474f77b9ed601d81545a51f770f912949e94987eb78edce
SHA-256 digest of the receipt content
Issuer AID
EP1_FGkcwfHAuih6VUzv9kgAVBvvSoaswSUao61lkxhE
Party that issued this receipt
ImpactMiles handle
audit:governance:c14c36f445ada149

This receipt is anchored by content hash. A resolvable credential SAID is not available for this record.

Applies to

  • Public site, portals and email pixels

Jurisdictions

  • Hong Kong (PDPO, IRD s.88)
  • United Kingdom (UK GDPR, DPA 2018)
  • European Union (GDPR)
  • Singapore (PDPA)
  • Australia (Privacy Act 1988)
  • Japan (APPI)
  • Wider APAC per country taxonomy

How this is applied in-product

  • Consent banner on public site
  • Preference centre linked from footer

1. Categories

  • Strictly necessary - session, CSRF, load balancing.
  • Functional - language, theme, wallet PWA state.
  • Analytics - aggregate usage measurement, only with consent.
  • Marketing - none by default; any future use requires explicit opt-in.

2. Consent

Non-essential cookies are blocked until the user grants consent. Withdrawal is available at any time from the footer link.

Questions or concerns about this policy? Contact the DPO.

Related policies

Governance CharterData Protection and Privacy PolicyData Retention and Deletion ScheduleData Protection Impact Assessment (DPIA) Methodology