Cookie Policy

This policy explains the cookies and similar technologies used on Nightingale websites and applications, what they do, and the choices available to you.

A cookie is a small text file stored on your device by your browser. We also use closely related technologies such as browser local storage, which works in a similar way.

Categories of cookies we use

Strictly necessary

These are required for the service to function and cannot be switched off in our systems.

| Purpose | Description | | --- | --- | | Authentication | Keeps you signed in and maintains your session across pages | | Security | Protects against cross-site request forgery and session hijacking | | Load handling | Routes your requests correctly across our infrastructure | | Preference storage | Remembers interface preferences such as theme and layout |

Because these are essential to providing a service you have requested, they are set without consent.

Analytics

These help us understand how the service is used so we can improve it — for example which pages are visited, which features are used, and where people encounter errors. Analytics data is aggregated and used for product improvement, not to build advertising profiles.

Marketing

Used on our public marketing pages to measure the effectiveness of campaigns and to understand how visitors arrive at our site. These are only set where you have given consent.

Marketing cookies are never set inside the authenticated Admin Centre or inside Nightingale applications.

Third-party cookies

Some cookies are set by the providers listed on our subprocessors page — for example our payment provider during checkout, or our analytics provider. Those providers process the data under their own terms as well as our agreements with them.

Your choices

• Consent banner. Where non-essential cookies are used, you can accept or reject them, and change your choice at any time from the cookie settings link in the site footer.
• Browser controls. All major browsers let you block or delete cookies. Blocking strictly necessary cookies will prevent you from signing in.
• Do Not Track. We do not set analytics or marketing cookies where your browser sends a Do Not Track or Global Privacy Control signal.

Retention

Session cookies are deleted when you close your browser. Persistent cookies last no longer than 12 months from the date they are last set, and analytics identifiers are rotated at least annually.

Contact

Questions about this policy: privacy@nightingalesoftware.co.uk