Cookie Policy — Celestial Verity
Section 01

What Are Cookies

Cookies are small text files placed on your device — computer, tablet, or mobile phone — when you visit a website. They allow the website to recognise your device and store certain information about your preferences, session state, or behaviour.

Cookies do not contain executable code and cannot carry viruses. They cannot access other information on your device. Their purpose is limited to what is described in this policy.

Similar technologies — including local storage, session storage, and pixel tags — may also be used alongside cookies. References to "cookies" in this policy include these technologies where relevant. Email tracking pixels, which may record whether an email sent to you was opened, are a separate technology from browser cookies and are described in Section 7 under Brevo.

First-party cookies are set directly by Celestial Verity and can only be read by us.

Third-party cookies are set by our technology partners — Stripe, CookieYes, and our messaging provider — subject to their own privacy policies.

Section 02

Who We Are

The data controller responsible for cookies set on this platform is:

Celestial AI Agents Ltd (trading as Celestial Verity)
Company No. 16511006
27 Streatfield Road, Harrow, HA3 9BP
England & Wales
ICO Registration: ZB921838
Contact: support@celestialverity.com

For third-party cookies, the relevant third party acts as an independent data controller or processor as described in Section 7.

Section 03

How We Use Cookies

Celestial Verity uses cookies for the following purposes:

Strictly Necessary

To operate the platform — authentication, session management, security, shopping cart and checkout integrity, and payment processing. These cookies cannot be disabled without breaking core platform functionality. They are set automatically and require no consent under PECR Regulation 6(4).

Functional

To remember your preferences — including your cookie consent choices — so you do not have to repeat them on every visit. These require your consent.

Analytics

To understand how the platform is used — which pages are visited, where visitors arrive from, and how users move through the platform. These cookies are used in aggregate to improve the platform and require your explicit consent before they are set.

We do not use advertising or marketing cookies. No cookie on this platform tracks you for advertising purposes, builds an advertising profile, or shares your data with advertising networks. This is by design and will not change.

Section 04

Strictly Necessary Cookies

These cookies are essential for the platform to function. They do not require consent under PECR and cannot be switched off. They are set in response to actions you take — logging in, placing an order, or moving through checkout. The Platform's admin area uses WordPress authentication cookies; admin access to User data is separately governed by the Terms of Use (Section 31.4) and Privacy Policy (Section 10).

Note: Stripe cookies have been moved from Section 7 to Section 4 because they are strictly necessary for payment processing to function. They cannot be disabled without preventing checkout.

Section 05

Functional Cookies

These cookies remember your choices and improve your experience. They require your consent. The most important functional cookies on this platform are the consent management cookies set by CookieYes, which record your cookie preferences so you are not asked again on every visit.

Note on the consent paradox: the cookieyes-consent cookie itself is classified as functional and requires consent. However, CookieYes sets this cookie to record your consent decision before you have technically given consent. This is a recognised and accepted approach under PECR — the cookie is limited solely to recording the consent choice and has no other function.

Section 06

Analytics Cookies

These cookies collect information about how visitors use the platform — which pages are viewed, how long visitors stay, and where traffic originates. All data is used in aggregate to improve platform performance. Analytics cookies are only set after you have given your explicit consent. If you decline, no visit tracking data is collected about you.

Sourcebuster is an open-source JavaScript library used to track visit attribution data. It does not set third-party cookies — all data it collects is stored in first-party cookies readable only by Celestial Verity. No data is sent to any Sourcebuster server. The data is processed entirely within the Platform's own analytics environment.

Section 07

Third-Party Cookies & Services

Some services integrated with this platform may set cookies or process data in connection with your use of the platform. These third parties act as independent data controllers where specified.

Stripe — Payment Processing

Stripe's payment session cookies (__stripe_mid and __stripe_sid) are classified as strictly necessary and listed in Section 4. Beyond these, Stripe may process payment-related data server-side in connection with fraud prevention and payment authorisation. This processing is governed by Stripe's own privacy policy and their role as an independent data controller for their own fraud and security systems.

Stripe's privacy policy: stripe.com/gb/privacy

CookieYes — Consent Management

CookieYes provides the cookie consent management banner on this platform. It sets the functional cookies described in Section 5 to store your consent preferences and maintain a compliance audit log. CookieYes processes consent data in accordance with its own privacy policy and as a data processor under the Platform's instructions.

CookieYes privacy policy: cookieyes.com/privacy-policy

Messaging Provider (TalkJS or equivalent)

The Platform's messaging inbox is operated by a third-party provider. This provider may set session-level cookies or use local storage to maintain your messaging session state — for example, to keep your inbox open between page loads and to deliver real-time message notifications. These cookies are strictly necessary for the messaging system to function and are set only when you access the Platform's messaging inbox.

The Platform only uses messaging providers who have entered into a Data Processing Agreement (DPA) under UK GDPR Article 28. Message content is not used by the provider for their own purposes. The current messaging provider and their privacy policy are available on request at support@celestialverity.com.

Brevo — Transactional Email

Brevo processes transactional emails sent by the platform — order confirmations, dispute notifications, account approvals, and platform communications. Brevo does not set cookies in your browser when you visit this platform. Emails sent to you by the platform may contain a tracking pixel — a small invisible image that records whether the email was opened and when. This is a standard email technology separate from browser cookies. You can prevent email tracking pixels from loading by disabling automatic image loading in your email client.

Brevo's privacy policy: brevo.com/legal/privacypolicy

This platform does not use advertising networks, social media tracking pixels, or retargeting cookies. No third-party advertising cookies are set when you visit Celestial Verity. This is by architecture — not policy that can be changed without updating this document and obtaining fresh consent.

As the platform grows, additional third-party services may be integrated. This Cookie Policy will be updated before any new cookies are set, and you will be prompted to review and renew your consent through the consent banner where new optional cookies are introduced.

Section 08

Cookie Duration

Cookies on this platform are either session cookies or persistent cookies:

Session Cookies

Session cookies are temporary. They exist only for the duration of your visit and are automatically deleted when you close your browser. The majority of cookies on this platform — including most authentication and analytics cookies — are session cookies.

Persistent Cookies

Persistent cookies remain on your device after your browser is closed, up to the duration stated in the cookie tables above. They allow the platform to recognise you on a return visit. The longest-lived persistent cookies on this platform are the consent preference cookies set by CookieYes (1 year) and the WordPress interface preferences cookie (1 year). Stripe's fraud prevention cookie (__stripe_mid) also persists for 1 year in accordance with Stripe's security requirements.

Section 09

Your Consent

When you first visit Celestial Verity, a cookie consent banner is displayed. This banner gives you the ability to:

Accept all cookies — strictly necessary, functional, and analytics cookies are all permitted.

Accept necessary only — only strictly necessary cookies are permitted. Functional and analytics cookies are not set.

Customise preferences — accept or reject each category individually.

Strictly necessary cookies do not require consent and will be set regardless of your choice. They are essential for the platform to operate and are exempt from the consent requirement under PECR Regulation 6(4).

Your consent is recorded by CookieYes with a timestamp and stored in your browser for 1 year. You may withdraw or change your consent at any time by clicking the "Cookie Preferences" link in the footer of any page, or by clearing your browser cookies and revisiting the platform. Withdrawing consent does not affect the lawfulness of any processing that took place before withdrawal. After withdrawal, optional cookies that have already been set will remain on your device until they expire naturally or until you delete them through your browser settings.

Withdrawing consent is as easy as giving it. Click "Cookie Preferences" in the footer of any page. Your preference is updated immediately.

Our legal basis for processing data through strictly necessary cookies is legitimate interests under Article 6(1)(f) UK GDPR and the exemption under Regulation 6(4) PECR. For all other cookies, our legal basis is your explicit consent under Article 6(1)(a) UK GDPR and Regulation 6(1) PECR.

Section 10

Managing Cookies

You can manage and delete cookies in the following ways:

Cookie Preference Centre

Click the "Cookie Preferences" link in the footer of any page on this platform to access the CookieYes preference centre. You can review, change, or withdraw your consent at any time. Changes take effect immediately and do not affect your ability to use the platform's core functionality.

Browser Settings

Every major browser allows you to block or delete cookies. The method varies by browser:

Google Chrome: Settings → Privacy and Security → Cookies and other site data

Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data

Safari: Preferences → Privacy → Manage Website Data

Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies

Blocking strictly necessary cookies will prevent the platform from functioning correctly. You will not be able to log in, maintain a session, use the messaging inbox, or complete orders if these cookies are blocked at browser level.

Third-Party Opt-Outs

For cookies set by Stripe, refer to Stripe's privacy portal at stripe.com/gb/privacy. Stripe cookies related to payment security cannot be disabled without preventing payment processing from working. For CookieYes, use the preference centre described above.

Section 11

Do Not Track

Some browsers include a "Do Not Track" (DNT) signal that can be sent to websites to indicate you do not wish to be tracked. There is currently no universally accepted legal standard for how websites must respond to DNT signals in the United Kingdom.

Celestial Verity does not currently alter its cookie behaviour in response to DNT signals. However, because we do not use advertising or retargeting cookies, our data collection is already significantly more limited than most platforms. Our analytics cookies are session-only and collect only aggregate, anonymous visit source data.

If a binding legal standard for DNT is established in the United Kingdom, we will update our practices accordingly and revise this policy.

Section 12

Changes to This Policy

Celestial Verity may update this Cookie Policy as the platform develops, as new technology partners are integrated, or as legal requirements change. Material changes — including the introduction of new cookie categories or new third-party providers — will be communicated through the cookie consent banner before any new cookies are set. Where a new optional cookie category is introduced, you will be asked to provide fresh consent for that category specifically.

The effective date at the top of this document reflects the date of the most recent revision. You are encouraged to review this policy periodically, particularly when the consent banner prompts you to do so.

Continued use of the platform following notification of a material change constitutes acknowledgement of the updated policy for strictly necessary cookies. For optional cookies, renewed explicit consent will always be requested before those cookies are set.

Section 13

Contact

If you have questions about this Cookie Policy, wish to exercise your rights under UK GDPR in relation to data processed through cookies, or wish to raise a concern, contact us at:

Celestial AI Agents Ltd (trading as Celestial Verity)
27 Streatfield Road, Harrow, HA3 9BP
support@celestialverity.com

We aim to respond to all cookie and data rights queries within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

Full details of how we handle personal data collected through cookies are set out in our Privacy Policy.

By architecture.
Transparent by design. Honest by standard.