Last updated: 26 November 2025
Applies to: maxiron.com (the “Website”) and, where relevant, the MaxIron Portal (the “Portal”).
Controller: MaxIron Ltd, 3rd Floor, 86–90 Paul Street, London EC2A 4NE. Contact: office@maxiron.com
1) What are cookies?
Cookies are small text files placed on your device by websites you visit. They enable core functionality (e.g., page navigation, security), remember preferences, and help us understand usage to improve the Website and Portal. This policy explains the cookies we use and how you can control them.
This policy is designed to comply with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
2) How we use cookies (lawful basis)
- Strictly Necessary cookies are essential for the Website/Portal to function (e.g., load balancing, authentication, fraud prevention). These run on legitimate interests/necessary for a service you request and do not require consent.
- Preference, Performance/Analytics, and Marketing cookies are used only with your consent collected via our cookie banner. You can withdraw consent at any time (see “Manage your preferences”).
3) Cookies we use (categories)
A. Strictly Necessary – enable core functionality such as session management, security, and load balancing. These cannot be turned off via the banner (but you can block them in your browser; the site may not work).
B. Preference (Functionality) – remember choices (e.g., language, UI settings).
C. Performance/Analytics – help us understand how the site is used (e.g., page views, traffic sources) so we can improve it. We currently use Google Analytics 4 (GA4) with IP-anonymisation enabled.
D. Marketing/Advertising – deliver or measure advertising and build audiences. (Only set if you enable Marketing in the banner.)
We avoid setting non-essential cookies until you opt in. If you later change your mind, we respect that choice.
4) Manage your preferences
- Cookie banner: Use the “Manage Cookies” link in the footer or reopen the banner to change your settings at any time.
- Browser controls: You can block or delete cookies through your browser settings. Blocking Strictly Necessary cookies may break site functionality.
(Insert your site link/button label here, e.g., “Manage Cookies”.)
5) Cookie list
Lifespans are counted from the last visit. Names and durations may vary by browser and updates from providers.
Strictly Necessary
| Name | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| _cf_bm / __cf_duid (example if using Cloudflare) | .maxiron.com / Cloudflare | Bot management, traffic integrity | 30 minutes / up to 1 year | First/Third-party HTTP |
| _app_session (example if using a session cookie) | .maxiron.com | Maintains logged-in session on the Portal | Session | First-party HTTP |
(Replace/add your real necessary cookies—load balancer, session, CSRF, etc.)
Preference (Functionality)
| Name | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| consent_prefs | .maxiron.com | Stores your cookie category choices | 6–12 months | First-party HTTP |
Performance / Analytics
| Name | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| _ga | .maxiron.com | Distinguishes users for analytics (GA4) | 13 months (or region default) | First-party HTTP |
| _ga_* (e.g., _ga_ABC123) | .maxiron.com | Session state / pageview counting (GA4) | 13 months (or region default) | First-party HTTP |
| _gid (if used) | .maxiron.com | Distinguishes users on a 24h window | 24 hours | First-party HTTP |
| _gat / _ga_gtag_* (if used) | .maxiron.com | Throttles request rate | 1 minute | First-party HTTP |
We configure GA4 with IP anonymisation and respect consent mode; analytics runs only if you opt in.
Marketing / Advertising (only if enabled on your site)
| Name | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| _gcl_au (if using Google Ads) | .maxiron.com | Stores ad click info for conversions | 90 days | First-party HTTP |
| _fbp (if using Meta Pixel) | .maxiron.com | Helps deliver advertising | 90 days | First-party HTTP |
If you don’t use Ads/Meta, delete this section.
6) Third parties
Some cookies are set by third parties (e.g., Google). Where these providers process personal data, they do so under their own privacy notices. We only load their tags after you consent to the relevant category.
7) Changes to this policy
We may update this policy from time to time. We will post changes here and update the “Last updated” date. Material changes may be communicated via the banner or on-site notice.
8) Contact
Questions or requests? Email office@maxiron.com.