Cookie Policy
Last updated: 29 August 2026
This Cookie Policy explains how Hilead Ltd (“Hilead”, “we”, “us”) uses cookies and similar tracking technologies on hilead.co and within the Hilead platform (the “Service”). This policy supplements our Privacy Policy.
We use strictly necessary and limited functional cookies on hilead.co, and — only if you consent through our cookie banner — analytics cookies that help us understand how visitors use the site. We do not use marketing or advertising cookies on the public website.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They allow the website to remember your actions and preferences (such as login, language, font size, and other display preferences) over a period of time.
Similar technologies include local storage, session storage, pixels, and SDK identifiers. For simplicity, this policy refers to all of these as “cookies”.
2. How we categorise cookies
We classify cookies into the following categories:
2.1 Strictly necessary cookies
These are essential for the Service to function. They cannot be disabled. They include:
- Authentication cookies: keep you logged in.
- Session cookies: maintain your session as you navigate the Service.
- Security cookies: protect against fraud, abuse, and CSRF attacks.
- Load balancing cookies: ensure the Service performs reliably.
Legal basis: legitimate interest. No consent required under UK PECR / EU ePrivacy Directive because they are strictly necessary.
2.2 Functional cookies
These remember your preferences to improve your experience:
- Theme (light / dark mode).
- Language and locale settings.
- Recently used filters or views.
- Dismissal of in-app banners or modals.
Legal basis: legitimate interest or consent depending on jurisdiction.
2.3 Analytics cookies
With your consent, we use analytics services to understand how visitors use hilead.co so we can improve it:
- PostHog (EU-hosted): product analytics and session replay. Helps us see which pages are visited and how the site is used. See posthog.com/privacy.
- Google Tag Manager / Google Analytics: aggregate traffic measurement. See policies.google.com/privacy.
These cookies are never set before you opt in through the cookie banner, as required by UK PECR / EU ePrivacy law, and are deleted if you later withdraw consent. Legal basis: consent.
2.4 Marketing cookies
We do not use third-party advertising or retargeting cookies on hilead.co.
3. Cookies we use
The list below is updated periodically. The exact set of cookies in use at any time may vary slightly.
| Cookie name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
hilead_session | Hilead | Strictly necessary | Maintains your login session | Session |
hilead_csrf | Hilead | Strictly necessary | CSRF protection | Session |
hilead_auth | Hilead | Strictly necessary | Authentication token | 30 days |
hilead_theme | Hilead | Functional | Remembers your light / dark mode preference | 1 year |
hilead_locale | Hilead | Functional | Remembers your language preference | 1 year |
cookie_consent | Hilead | Strictly necessary | Stores your cookie preferences | 1 year |
ph_* | PostHog (EU) | Analytics (consent only) | Product analytics and session replay identifiers | 1 year |
_ga, _ga_* | Analytics (consent only) | Distinguishes visitors for traffic measurement | Up to 2 years |
If you would like an up-to-date detailed list, please contact us at [email protected].
4. Third-party services
When you use the Service, certain third-party services we rely on may set their own cookies. These include:
- Stripe (payments), may set cookies during checkout to process your transaction and prevent fraud. See stripe.com/privacy.
- PostHog (analytics, EU-hosted), sets cookies only after you consent to analytics. See posthog.com/privacy.
- Google (Tag Manager / Analytics), sets cookies only after you consent to analytics. See policies.google.com/privacy.
- Hosting and CDN providers, may set technical cookies for security and performance.
We do not control these third-party cookies. Please refer to the respective providers’ privacy policies for more information.
5. Managing your cookie preferences
5.1 Cookie banner
On your first visit to hilead.co we display a cookie banner that lets you:
- Accept all cookies.
- Reject all non-essential cookies.
- Customise your choices by category.
You can change your preferences at any time via the “Cookie settings” link in the website footer. Withdrawing consent removes the cookies the withdrawn category had set.
5.2 Browser settings
Most browsers let you control cookies through their settings. You can:
- Block all cookies.
- Block third-party cookies only.
- Delete cookies when you close your browser.
- Be notified before a cookie is set.
Note that blocking strictly necessary cookies will prevent the Service from functioning correctly (you may not be able to log in, for example).
Browser-specific instructions:
- Chrome: support.google.com/chrome/answer/95647
- Firefox: support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
- Safari: support.apple.com/guide/safari/manage-cookies-sfri11471
- Edge: support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge
5.3 Do Not Track and Global Privacy Control
We honour Global Privacy Control (GPC) signals as required by California law. When we detect a GPC signal, we treat it as a request to opt out of any “sale” or “sharing” of personal information under CCPA/CPRA.
We currently do not respond to “Do Not Track” (DNT) browser signals because there is no industry consensus on how to interpret them.
6. Changes to this policy
We may update this Cookie Policy from time to time. We will update the “Last updated” date and, where changes are material, notify you on the website, through a cookie banner where applicable, or by email.
7. Contact
For any cookie-related questions, contact us at [email protected].
Hilead Ltd
71-75 Shelton Street, Covent Garden
London WC2H 9JQ, United Kingdom