OAS Cookies and Storage Technologies Notice
- Version:
- v0-beta
- Last updated:
- 21 September 2026
- Effective:
- 22 September 2026
Current position: the audited OAS interface uses storage needed for login, security and user-selected presentation preferences. It does not currently deploy a third-party advertising or analytics SDK. This notice must be updated before any non-essential storage or access technology is activated.
1. What this covers
Storage and access technologies (SATs) include cookies, local storage, session storage, pixels, scripts, tags and similar technologies placed on or read from a device. UK PECR rules apply alongside UK GDPR where a SAT is used on a user’s device.
This notice concerns the OAS website and application. Email open tracking, provider logs and server-side records are described in the Privacy Notice and security records rather than treated as browser cookies.
2. Technologies currently described
| Category | Purpose | Choice |
|---|---|---|
| Necessary session and security storage | Login, account security and protection of requested service functions | Required for the service |
| Preference storage | Remembering presentation preferences selected by the user | Can be cleared through the browser or device settings |
No advertising or cross-site analytics technology is described as active by this notice. Any future non-essential technology will be added to this notice before it is used.
3. Choice and future changes
OAS will not activate advertising, cross-site analytics, non-essential personalisation or other consent-requiring SATs without a compliant notice and choice mechanism. If a new technology is necessary but not strictly necessary, OAS will seek consent before storing or accessing it unless a lawful PECR exception applies.
Browser settings can restrict cookies, but blocking necessary security storage may prevent login or other requested functions.
4. Contact and complaints
Questions about storage technologies can be sent to [email protected]. For personal-data concerns, see the Privacy Notice and the Information Commissioner’s Office complaint route at ico.org.uk.
OAS will review this inventory before activating any new non-essential storage or access technology.