Cookie Policy
Please read this cookie policy carefully as it contains important information on who we are and how we use cookies and other similar storage and access technologies (SATs) on our website. This policy should be read together with our https://www.discoveryourpulse.com/privacy which sets out how and why we collect, store, use and share personal information generally, as well as your rights in relation to your personal information and details of how to contact us and supervisory authorities if you have a complaint.
Who we are
This Cookie Policy is issued on behalf of the Nova Ripples Group. References to ‘we’, ‘us’ or ‘our’ mean the relevant Group Company operating the website, application or digital service on which this Cookie Policy is displayed.
Our website
This Cookie Policy relates to your use of the website, application or digital service on which it is displayed.
Throughout our website, we may link to other websites owned and operated by third parties such as social media platforms. These other third party websites may also use cookies or similar technologies in accordance with their own separate policies. For privacy information relating to these other third party websites, please consult their policies as appropriate.
Cookies
A cookie is a small text file which is placed onto your device (eg computer, smartphone or other electronic device) when you use our website. We use cookies on our website. These help us for example recognise you as a user of our platform and your device and store some information about your preferences or past actions.
For example, we may monitor how many times you visit the website, which pages you go to, traffic data, location data and the originating domain name of your internet service provider. This information helps us to build a profile of our users and understand which pages are particularly helpful to users. Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually.
For further information on our use of cookies, including a detailed list of your information which we and others may collect through cookies, please see below.
For further information on cookies generally, including how to control and manage them, visit the guidance on cookies published by the UK Information Commissioner’s Office, or www.allaboutcookies.org.
Consent to use cookies and changing settings
We will ask for your consent to place cookies or other similar technologies on your device, except where they are essential to provide a service you have requested or are otherwise exempt from the requirement to obtain consent under applicable law.
You can withdraw your consent or change your cookie preferences at any time using the available on our website. It may be necessary to refresh the page for the updated settings to take effect.
Our use of cookies
The companies within the Nova Ripples Group may use a common technology stack across their websites, applications and digital services. The categories of cookies and similar technologies described below may therefore be used by more than one Group Company.
Not every technology listed below will be used by every Group Company or on every website, application or service. The technologies used may vary depending on the website, application or service you are using. The cookie preference centre allows you to manage your choices for non-essential cookies and similar technologies.
References to cookies include other technologies that store information on, or access information from, your device, including local storage, session storage, scripts, tags, software development kits and device-identification technologies.
The table below provides more information about the cookies we use and why:
| The cookies and other similar technologies we use | Name | Purpose | Whether the technology is essential for us to provide a service you have requested and whether we will seek consent before using it | Provider and typical duration |
|---|---|---|---|---|
| Cookie and privacy preferences | Cookie consent and preference records | To record whether you have accepted, rejected or customised optional cookies and similar technologies, and to remember those choices across visits. This may include the date of your choice and the version of the Cookie Notice presented to you. | Yes, essential. We will not request consent before using this technology because it is required to record and respect your privacy choices. | The relevant Group Company or its consent-management provider. Usually retained for between 6 and 12 months. |
| Authentication and sign-in | Authentication cookies, access tokens and session identifiers | To allow you to create an account, sign in, remain signed in, access the correct account or organisation and securely use our websites, applications and services. | Yes, essential. These technologies are required to provide secure account access and the service you have requested. | The relevant Group Company or its authentication provider. Usually retained for the browser session or until the authentication token expires. |
| Session management | Session cookies and session-storage records | To maintain and manage your session, associate activity with the correct signed-in account, remember the stage reached in a transaction or form, and sign you out after an appropriate period of inactivity. | Yes, essential. These technologies are required to operate signed-in services securely. | The relevant Group Company or its authentication provider. Usually retained for the session or until automatic expiry. |
| Multi-factor authentication and trusted devices | MFA challenge records, trusted-device identifiers and security tokens | To verify your identity using an additional authentication factor, remember a device you have chosen to trust, detect unusual sign-in activity and reduce repeated MFA challenges where appropriate. Information may include a device identifier, browser type, operating system, verification status and the date a device was trusted. | Yes, essential, where used solely for authentication and account security. We will seek consent if the same identifier is also used for analytics, marketing or another non-essential purpose. | The relevant Group Company or its authentication provider. MFA challenge information is normally temporary. Trusted-device information may be retained for a stated period, such as 30 or 90 days. |
| Security, fraud prevention and service protection | Security cookies, device identifiers, anti-forgery tokens and fraud-prevention technologies | To prevent unauthorised access, identify suspicious activity, protect forms and transactions, prevent automated attacks and maintain the confidentiality, integrity and availability of our systems. Information may include IP address, browser and device information, failed sign-in attempts, request information and security events. | Yes, essential, where the technology is used solely and proportionately for security, fraud prevention or service protection. | The relevant Group Company and its hosting, authentication, payment or security providers. Retained for the session or for a limited security-record period. |
| Technical operation, routing and availability | Load-balancing, routing, network and availability technologies | To route requests to the correct service, maintain performance, distribute traffic, remember the appropriate server and support the availability and stability of our websites, applications and services. | Yes, essential. These technologies are required to transmit communications and provide the requested service. | The relevant Group Company or its cloud-hosting provider. Usually retained for the session or for a short technical period. |
| Website analytics and visitor journeys | Analytics cookies, local-storage identifiers, event tracking and similar analytics technologies | To understand how visitors find and use our public websites, the pages they visit, the routes they take, how long they spend on pages and where they encounter problems. We may use this information to understand and improve sign-up and onboarding journeys. | No, where this involves persistent identifiers or individual-level tracking. We will request consent before using the relevant technology. Limited aggregate statistical analytics may be used without consent where the legal conditions for the statistical-purpose exception are met. | PostHog or another cloud-hosted analytics and metrics provider selected by the relevant Group Company. Duration will depend on the provider and the relevant Group Company’s configured retention period. |
| Identified sign-up and customer journey analytics | Account-linked analytics identifier | Where you create or sign into an account, we may associate analytics information with your account, user ID, organisation or contact details. This allows us to understand the journey from website visit to registration and how registered users engage with our services. | No, not essential. We will request consent before storing or accessing information on your device for this purpose. | PostHog or another cloud-hosted analytics and metrics provider. Duration will depend on the provider and the relevant Group Company’s configured retention period. |
| Product and service usage analytics | Product analytics identifiers and event records | To understand how signed-in users use our applications and services, including sign-ins, features visited, actions completed, navigation paths, usage frequency, technical events and areas where users encounter difficulties. This helps us improve usability, prioritise development, provide support and understand product adoption. | No, where cookies, local storage, device identifiers or similar technologies are used for identifiable product tracking. We will request consent before using those technologies. Necessary server-side operational and security logs are dealt with separately and do not depend on cookie consent. | PostHog or another cloud-hosted product metrics provider selected by the relevant Group Company. Duration will depend on the configured retention period. |
| Session recording or replay, where enabled | Session replay and interaction recording technologies | To recreate interactions with a website or application so that we can identify usability problems and investigate technical issues. This may capture clicks, scrolling, navigation and page interactions. Passwords, payment information and sensitive input fields will be excluded or masked. | No, not essential. We will request consent before enabling session replay. | PostHog or another cloud-hosted analytics provider. Duration will be limited and stated in the cookie preference centre. |
| Error and performance monitoring | Error identifiers, diagnostic records and performance technologies | To identify crashes, errors, slow pages and other technical problems, maintain the availability of our services and investigate faults. Information may include the affected feature, browser, device, operating system, IP address and technical diagnostics. | This may be essential where limited to fault detection, security and technical operation. We will request consent if the technology is also used for broader behavioural analytics or individual tracking. | The relevant Group Company and its cloud-hosting, logging or monitoring provider. Duration will depend on the nature of the error and the configured retention period. |
| Payment and checkout | Checkout session cookies, payment-security identifiers and transaction tokens | To provide checkout and billing functionality, process payments, authenticate transactions, prevent payment fraud and administer subscriptions. Complete payment-card or bank-account credentials are handled by the payment provider and are not received or stored by the relevant Group Company. | Yes, essential. These technologies are required to provide the payment service requested by you. | Stripe or another payment provider selected by the relevant Group Company. Duration is determined by the provider according to the payment, security and fraud-prevention purpose. |
| User-selected preferences | Preference cookies and local-storage records | To remember choices you make, such as language, display, accessibility, navigation or other service preferences, so that they do not need to be selected again during each visit. | These may be essential or exempt where required to provide functionality specifically requested by you. Where a preference is not necessary or requested, we will seek consent where required. | The relevant Group Company. Usually retained for the session or for a limited period appropriate to the preference. |
Third party access to the cookies
Cookies and similar technologies may be accessed by the relevant Group Company and by third-party service providers used to provide the functions described in the table above. Where third parties process personal data on our behalf, we require them to protect that information in accordance with applicable data protection law and our contractual requirements.
How to turn off all cookies and the consequences of doing so
If you do not want to accept any cookies, you may be able to change your browser settings so that cookies (including those which are essential to the services requested) are not accepted. If you do this, please be aware that you may lose some of the functionality of our website.
For further information about cookies and how to disable them, please go to the guidance on cookies published by the UK Information Commissioner’s Office, or www.allaboutcookies.org.
How to contact us
Please contact us if you have any questions about this Cookie Policy or the information we hold about you. You can contact us using the details set out in the ‘How to contact us’ section of our Privacy Policy.
Do you need extra help?
If you would like this notice in another format (for example: audio, large print, braille), please contact us (see ‘How to contact us’ above).
Changes to this policy
We may change this policy from time to time. When we do, we will publish the updated version on our website.