← Governance framework
Data & Privacy
Cookies and Tracking Technologies Policy
Categories of cookies and similar technologies used across ImpactMiles surfaces, and how consent is obtained and recorded.
- Version
- v1.0
- Effective
- 2026-07-19
- Last reviewed
- 2026-07-19
- Next review
- 2027-07-19
- Owner
- Data Protection Officer
- Approver
- Executive Team
Applies to
- Public site, portals and email pixels
Jurisdictions
- Hong Kong (PDPO, IRD s.88)
- United Kingdom (UK GDPR, DPA 2018)
- European Union (GDPR)
- Singapore (PDPA)
- Australia (Privacy Act 1988)
- Japan (APPI)
- Wider APAC per country taxonomy
How this is applied in-product
- Consent banner on public site
- Preference centre linked from footer
1. Categories
- Strictly necessary - session, CSRF, load balancing.
- Functional - language, theme, wallet PWA state.
- Analytics - aggregate usage measurement, only with consent.
- Marketing - none by default; any future use requires explicit opt-in.
2. Consent
Non-essential cookies are blocked until the user grants consent. Withdrawal is available at any time from the footer link.
Questions or concerns about this policy? Contact the DPO.