Current Version: 1.2

Effective date: 18 August 2026

Mission Diverse CIC uses cookies and similar technologies on its websites and digital services to operate our websites, maintain security, understand how our services are used, improve functionality and, where appropriate, support communications and marketing.

This policy explains the technologies we may use, why we use them and the choices available to you.

What are cookies and similar technologies?

Cookies are small files or pieces of information stored on or accessed from your device when you visit a website.

We may also use other technologies that perform similar functions, including:

• browser or web storage;
• pixels and tracking technologies;
• scripts and tags;
• embedded content;
• device or browser identifiers;
• link and navigational technologies; and
• other technologies that store information on, or access information from, your device.

Throughout this policy, we refer to these collectively as “cookies and similar technologies”.

How we use these technologies

We may use cookies and similar technologies for purposes including:

• operating and delivering our website;
• maintaining website and account security;
• preventing fraud, misuse and unauthorised access;
• remembering settings and preferences;
• maintaining sessions and website functionality;
• understanding how visitors use our website and digital services;
• producing statistical information about website use;
• monitoring website performance;
• diagnosing faults and technical problems;
• improving navigation, accessibility and user experience;
• understanding which content and services are useful to visitors;
• managing forms, enquiries, bookings and other website functions;
• integrating services provided by third parties;
• supporting communications and marketing where permitted; and
• complying with legal, regulatory and information-security obligations.

The technologies used on our website may change from time to time as our services, systems and suppliers develop.

Essential and necessary technologies

Some cookies and similar technologies are required for our website or a service you request to work properly.

These may include technologies used for:

• website security;
• fraud prevention;
• authentication;
• maintaining a user session;
• load balancing;
• remembering privacy and cookie choices;
• processing forms or transactions;
• providing content or functionality specifically requested by a user; and
• meeting applicable security or legal requirements.

Where applicable law permits these technologies to be used without consent, they may be activated automatically.

You cannot normally disable essential technologies through our cookie preference tool where doing so would prevent the website or requested service from functioning properly. You may be able to restrict them through your browser, but parts of the website may then not work as intended.

Website preferences and functionality

We may use technologies to remember choices or improve the way our website appears or functions.

This may include:

• language or display preferences;
• accessibility settings;
• interface preferences;
• remembered website choices; and
• other functionality designed to provide or improve the service you request.

Where the law permits us to use these technologies without prior consent, we will provide appropriate information and any required means of objecting.

Where an applicable exception does not apply, we will obtain consent before using them.

Analytics and statistical information

We may use cookies and similar technologies to understand how our website and online services are used.

This may include information about:

• pages visited;
• navigation through the website;
• approximate visitor numbers;
• how long users interact with particular content;
• device and browser types;
• website performance;
• errors or technical problems;
• the source through which visitors reached the website; and
• general patterns of website use.

We may use this information to produce statistics, measure performance, understand demand and improve our website and services.

Where our use falls within an applicable statistical-purpose exception under the Privacy and Electronic Communications Regulations, we may use qualifying technologies without obtaining prior consent, subject to the requirements of that exception.

Where the exception does not apply, we will obtain consent where required.

Where statistical information involves personal data, we will also process that information in accordance with UK data protection law.

Marketing and advertising technologies

Where we use technologies for advertising, behavioural tracking, audience creation, remarketing or similar marketing purposes, we will obtain consent where required by law.

These technologies may help us understand whether our communications are effective or allow third-party platforms to recognise that a device has interacted with our website.

We will not treat continued use of the website as consent to non-essential advertising or tracking technologies where positive consent is legally required.

You may withdraw or change your consent at any time through the cookie settings available on our website.

Third-party technologies

Some functionality available through our website may be provided by third parties.

This may include providers of:

• website hosting and security;
• analytics;
• video or multimedia content;
• online forms;
• booking systems;
• payment services;
• social media functionality;
• communications platforms;
• customer relationship management systems; and
• other technology services.

These providers may place or access cookies or similar technologies when their services are used.

Depending on the circumstances, a third party may process information on our behalf or may determine its own purposes for processing information.

Where required, we will seek consent before enabling third-party technologies that do not fall within an applicable legal exception.

The processing undertaken by third-party providers may also be governed by their own privacy and cookie information.

Embedded content and external services

Our website may contain embedded content, links or functionality supplied by external organisations.

For example, an embedded video, map, social media feature or external booking service may allow the relevant provider to collect information when you interact with it.

Where reasonably possible, technologies requiring consent will not be activated until the appropriate choice has been made.

Following a link to an external website will normally mean that the privacy and cookie practices of that external organisation apply once you leave our website.

Personal information collected through website technologies

Some information collected through cookies or similar technologies may constitute personal data.

This may include information such as:

• IP addresses;
• online identifiers;
• device or browser identifiers;
• account or session information;
• website activity; and
• information that can be linked to other information relating to an identifiable person.

Where we process personal information, our Privacy and Data Protection Policy also applies.

The lawful basis for subsequent processing of personal information will depend on the purpose and circumstances.

Where consent is required by PECR for the use of a technology, we will obtain the required consent before using that technology.

Where a PECR exception applies, any subsequent processing of personal data will still be assessed under applicable data protection law.

Legitimate interests

In circumstances where cookies or similar technologies may lawfully be used without consent, Mission Diverse may rely on legitimate interests as the lawful basis for subsequent processing of personal information where appropriate.

Our legitimate interests may include:

• operating and protecting our website and systems;
• maintaining information security;
• detecting and preventing misuse;
• understanding and improving our services;
• maintaining appropriate technical and operational records;
• protecting our legal and commercial interests; and
• ensuring the effective and efficient operation of our digital services.

We will consider whether those interests are necessary and proportionate and whether they are overridden by the rights and interests of individuals.

Legitimate interests will not be used as a substitute for cookie consent where PECR requires consent before a technology is stored on or accesses a user’s device.

Consent

Where consent is required, we will seek it through an appropriate consent or cookie management mechanism.

Depending on the technologies used, you may be able to:

• accept all optional technologies;
• reject optional technologies;
• select particular categories;
• change your preferences; or
• withdraw consent previously given.

Consent must be freely given and based on a positive choice. Simply continuing to browse our website will not normally constitute consent to technologies that legally require consent.

Essential or otherwise exempt technologies may continue to operate even where optional technologies are rejected.

Changing your preferences

You may change your cookie choices through the cookie settings or preference control available on our website.

Changing your preference does not make earlier processing unlawful where it was lawful when undertaken.

Withdrawal of consent applies to future use of technologies dependent on that consent.

Some information previously obtained may continue to be retained where another lawful reason requires or permits us to retain it.

Browser controls

Most internet browsers allow users to control cookies through their settings.

Depending on your browser, you may be able to:

• view cookies;
• delete cookies;
• block cookies;
• restrict cookies from particular websites;
• clear stored website information; or
• configure privacy preferences.

Blocking all cookies may prevent some website functions from operating correctly.

Browser controls may not necessarily control all storage and access technologies used by websites.

How long technologies remain on your device

Some technologies operate only during a website session and are removed or become inactive when the session ends.

Others may remain for a defined period so that preferences or other information can be recognised when you return.

The length of time a technology remains active will depend on its purpose and the service involved.

We will take reasonable steps to ensure retention periods are appropriate to the relevant purpose and applicable law.

Retaining consent and technical records

We may retain records relating to cookie choices and consent where reasonably necessary to:

• demonstrate compliance;
• remember user preferences;
• manage consent;
• maintain audit records;
• investigate technical or compliance issues; and
• establish, exercise or defend legal rights.

A record of a user’s preference may itself require the use of a cookie or similar technology.

Security

We may use cookies and similar technologies to help protect the website, users and Mission Diverse against security risks.

This may include technologies used to:

• detect suspicious activity;
• identify attempts to compromise systems;
• prevent fraudulent or automated activity;
• maintain secure sessions;
• protect forms and online services; and
• maintain appropriate security logs.

Where these technologies are necessary to deliver or protect a service requested by a user, an applicable legal exception may permit their use without prior consent.

Children

Our website and professional services are primarily directed at organisations and adults.

Where we become aware that a particular digital service is likely to be accessed by children, we will consider whether additional privacy protections, information or consent arrangements are required.

International processing

Some technology providers may process information outside the United Kingdom.

Where personal data is transferred internationally, we will use appropriate safeguards or transfer mechanisms where required by data protection law.

Your data protection rights

Where information obtained through website technologies constitutes personal data, you may have rights under UK data protection law.

Depending on the circumstances, these may include rights to:

• access your personal information;
• correct inaccurate information;
• request deletion;
• restrict processing;
• object to certain processing;
• withdraw consent where processing relies on consent; and
• complain about the way your information is handled.

These rights are subject to applicable legal conditions and exemptions.

Further information is available in our Privacy Notice and Data Protection Policy.

Cookie audits and changes to technologies

We may periodically review the cookies and similar technologies used across our websites and digital services.

We may:

• introduce new technologies;
• remove existing technologies;
• change technology providers;
• change retention periods;
• change the purposes for which a technology is used; or
• alter the categories used within our consent management system.

Where a change requires fresh consent, we will seek that consent before using the relevant technology for the new purpose.

We may update this policy to reflect changes in our website, technology, suppliers, legislation or regulatory guidance.

Current cookie information

The specific technologies operating on our website may change more frequently than this policy.

Where appropriate, current information about individual cookies or technologies, their providers, purposes and duration may be provided through our cookie preference tool or cookie banner.

Information displayed through that tool should be read together with this policy.

Contact us

If you have questions about our use of cookies or similar technologies, our use of personal information or your privacy rights, please contact Mission Diverse using the contact information published on our website.

You also have the right to raise a complaint with the Information Commissioner’s Office where applicable.

Changes to this policy

We may amend this policy to reflect changes in law, regulatory guidance, technologies, service providers or our organisational activities.

The current version of this policy applies from its stated effective date. Updates do not apply retrospectively, although they may describe or clarify technologies, processing activities and organisational practices that were already in place before the relevant amendment.

Version	Effective Date	Amendments	Approved By
1.0	5 October 2020	Policy effective	Data Protection Officer
1.1	5 October 2020	Section added:  “Complaints”	Data Protection Officer
1.2	18 August 2026	Section added: “Embedded content and external services”	Data Protection Officer