Main content area


Some services on this website require us to collect personal information from you. To comply with data protection legislation, we must tell you how we store the information we collect and how it is used. Any information you submit will be stored securely and will never be passed on or sold to any third party.

User anonymity and personal information

Log files are maintained and analysed to monitor website usage. Log files do not capture personal information but do capture your IP address, which is automatically recognised by our web servers.

Aggregated analyses of these log files may be made available to CIVIC staff and partner agencies to allow us to measure (for example) overall popularity of the site and typical user paths through the site.

CIVIC will not attempt to identify individual users. You should be aware, however, that access to web pages will generally create log entries in the systems of your ISP or network service provider. These entities may be in a position to identify the client computer equipment used to access a page. Such monitoring would be done by the provider of network services and is beyond the responsibility or control of CIVIC.

CIVIC will make no attempt to track or identify individual users, except where there is a reasonable suspicion that unauthorised access to systems is being attempted. In the case of all users, CIVIC reserves the right to attempt to identify and track any individual who is reasonably suspected of trying to gain unauthorised access to computer systems or resources operating as part of CIVIC web services.

As a condition of use of this site, all users must give permission for CIVIC to use its access logs to attempt to track users who are reasonably suspected of gaining, or attempting to gain, unauthorised access.

All log file information collected by CIVIC is kept secure, and no access to raw log files is given to any third party.

Use of cookies

This website does not store any information that would, on its own, allow us to identify individual users of this service without their permission. Any cookies that may be used by this website are used solely on a ‘per session’ basis or to maintain user preferences. Cookies are not shared with any third parties.

Cookie Name Description

This cookie is used by CIVIC's load balancer to identify the server that is active for your request on our cluster. Its purpose is to improve the performance of the website.

The cookie is essential to the operation of the site and is always set by the load balancer, but does not store any personal information. This cookie might be set from the domain or from

Expiry: Session

JSESSIONID, jwtSig, jwtPld

These are simple tokens used by Java applications to identify your unique session on the website. Typically used to maintain the integrity of your session while transacting in10formation with a website (accessing secure areas, forms submissions etc).

Expiry: Session / 1 day


Session cookie for Stripe, and used to collect payments on the Cookie Control download page.

Expiry: 1 year


Cookie Control cookies. This cookie is set to remember the user's preferences about cookies.

Expiry: 3 months

euconsent This cookie contains the IAB TCF consent string, and consent information for all the standard IAB vendors and purposes.
__utma, __utmb, __utmc, __utmc, _ga, _gat, _gid

We use Google Analytics to monitor traffic levels, search queries and visits to this website.

Google Analytics stores IP addresses anonymously on its servers in the US. Neither CIVIC nor Google associate your IP address with any personally identifiable information.

These cookies enable Google to determine whether you are a returning visitor to the site, and to track the pages that you visit during your session. They are set only after you have given us consent to use cookies.

Expiry: 2 years


This cookie is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_id is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.

Expiry: 1 year and 1 month


This cookie is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_ses is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.

Expiry: 30 minutes


For the use of the opt-out feature of MATOMO Analytics (this is called a nonce and helps prevent CSRF security issues).

Expiry: 14 days

Website Traffic

In order to improve our website structure and functionality, we count the number of visitors and how visitors move around the website. More specifically, we are tracking the following fully anonymised information:

  • Masked 2 byte(s) IPs - e.g.
  • Date and time of a page request
  • Title of the page being viewed (Page Title)
  • URL of the page being viewed (Page URL)
  • URL of the page that was viewed prior to the current page (Referrer URL)
  • Screen resolution being used
  • Time in local user’s timezone
  • Files that were clicked and downloaded (Download)
  • Links to an outside domain that were clicked (Outlink)
  • Pages generation time/Page speed (the time it takes for webpages to be generated by the webserver and then downloaded by the user)
  • Main Language of the browser being used (Accept-Language header)
  • User Agent of the browser being used (User-Agent header)

We are not collecting personal data or geolocation information.

This information is hosted within the UK/the European Economic Area (EEA).