GOVIQ-POL-019 · v0.1 (DRAFT)

Cookie Policy

Effective
2026-05-29 (target)
Owner
Liam McDonagh, CEO & acting Data Protection Lead
Review cycle
Annual, or on any change to website tooling
Contact
privacy@goviq.ie

Statutory references: ePrivacy Regulations 2011 (S.I. No. 336 of 2011), GDPR (consent for non-essential cookies), Data Protection Commission Guidance on Cookies (2020).

1.What are cookies

Cookies are small text files stored on your device by your web browser when you visit a website. They are used for many purposes — making a site work, remembering preferences, measuring how a site is used, and (often) tracking visitors across sites.

This policy explains which cookies and similar technologies GovIQ uses at goviq.ie, why, and how you can control them.

2.Categories of cookies and similar technologies

The Data Protection Commission's 2020 guidance distinguishes four categories of cookies. GovIQ uses only the first two.

2.1 Strictly necessary cookies — set without consent

These cookies are essential for the website to function. The ePrivacy Regulations exempt them from consent because without them, the service you have asked for cannot be delivered.

Cookie / technologyWhat it doesProviderHow long it lasts
Session cookie (Vercel platform)Identifies a single browsing session for the site to functionVercelSession (deleted when browser closed)
CSRF tokenPrevents cross-site request forgery on any form submissionGovIQSession
Consent record cookieRemembers your cookie consent choices so we don't ask againGovIQ12 months

2.2 Performance / analytics cookies — consent required

We use a minimal analytics setup to understand which pages are useful and where to improve. These cookies are set only after you give consent via our cookie banner.

Cookie / technologyWhat it doesProviderHow long it lasts
To be confirmed at website build (e.g., Plausible, Fathom, or self-hosted Umami)Aggregate, anonymised analytics — page views, referrers, geographyTBD — EEA-hosted preferredTBD per provider

Our deliberate choice:GovIQ uses privacy-preserving analytics that do not track individuals across sites and do not require an analytics cookie at all (e.g., Plausible / Fathom). If we have implemented one of these, this section may say “no analytics cookies — privacy-preserving server-side analytics only.”

2.3 Functional cookies — consent required

We do not currently use functional cookies (e.g., language preferences). If we add them in future, this section will be updated and consent will be sought.

2.4 Marketing / advertising cookies

We do not use marketing or advertising cookies. We do not run advertising on our website, we do not embed advertising-network pixels, and we do not share visitor data with third-party advertisers.

3.Third-party cookies

Some content on goviq.ie may be embedded from third-party services (e.g., a YouTube demo video or a calendar booking widget). These may set their own cookies. Where possible we use privacy-preserving embed modes:

  • YouTube: youtube-nocookie.com embed (no cookies until you click play)
  • Calendar bookings: provider TBD, in privacy mode

A live list of any third-party embeds and the cookies they may set is maintained on this page whenever such embeds are present.

5.How to control cookies in your browser

In addition to our cookie banner, your browser provides controls:

BrowserHow to manage cookies
ChromeSettings → Privacy and security → Cookies and other site data
FirefoxSettings → Privacy & Security → Cookies and Site Data
SafariPreferences → Privacy → Cookies and website data
EdgeSettings → Cookies and site permissions

You can also use private / incognito mode for sessions where you do not want cookies retained.

Blocking strictly necessary cookies will break parts of the site (you will not be able to submit forms, for example).

6.International transfers and analytics

Our preferred analytics providers are EEA-hosted (Plausible, Fathom, self-hosted Umami). If we ever use a US-hosted analytics service that processes IP addresses or device identifiers, this section will:

  • Disclose the provider and the transfer mechanism (SCCs + supplementary measures)
  • Be subject to renewed consent if the transfer mechanism changes materially

7.Updates to this policy

This policy is reviewed:

  • Annually
  • Whenever we add or remove any cookie or similar technology
  • Whenever the DPC issues updated guidance

Material changes are reflected in the cookie banner so existing visitors are prompted to re-confirm consent.

Version history is preserved in the GovIQ repository.

8.Your rights

Cookies that contain identifiers or that are linked to identifiable individuals are personal data under GDPR. The full list of your rights — including access, erasure, and the right to lodge a complaint with the Data Protection Commission — is set out in our Privacy Policy (§8).

9.How to contact us