YOU™

Legal

Cookie Policy

Last updated: 14 September 2026

This Cookie Policy explains how YOU™, operated by Unidia LLC, uses cookies and similar technologies when you visit or use the YOU™ website and related online services.

This Policy should be read together with the YOU™ Privacy Policy.

YOU™ is operated by:

Unidia LLC EIN 30-1438835 131 Continental Dr Newark, Delaware 19713 New Castle County United States

Email: [email protected]

Cookies are small text or data files that websites may store on or access from your device when you visit a website or use an online service.

Cookies can help a website:

  • recognise a browser or device;
  • maintain a login session;
  • remember preferences;
  • keep items in a shopping cart;
  • secure forms and accounts;
  • process checkout;
  • remember privacy choices;
  • detect abuse or fraud; and
  • understand how a website is used.

Cookies may be:

Session cookies, which normally expire when the browser session ends; or

Persistent cookies, which remain on the device for a specified period or until deleted.

This Policy also applies to technologies that perform functions similar to cookies, where applicable.

These may include:

  • local storage;
  • session storage;
  • pixels;
  • tags;
  • scripts;
  • software development kits;
  • device or browser identifiers;
  • embedded technologies; and
  • other storage or access technologies.

The legal rules applicable to cookies may also apply to these technologies.

Cookies and similar technologies may be:

First-party technologies, which are placed or controlled directly through YOU™; or

Third-party technologies, which are provided by another service used by YOU™, such as a payment processor, security provider or analytics provider.

The relevant third party may process information under its own privacy terms where it acts as an independent controller.

YOU™ may use the following categories:

  1. Strictly Necessary;
  2. Functional and Preference;
  3. Analytics and Measurement;
  4. Advertising and Targeting.

Not every category is necessarily active at all times.

The technologies actually used on the live website should be identified in the site’s Cookie Settings or consent interface.

Strictly Necessary technologies are required to provide functionality requested by the user or to operate essential parts of the service.

They may be used for purposes including:

  • authentication;
  • login sessions;
  • account security;
  • fraud prevention;
  • checkout;
  • shopping-cart functionality;
  • payment-flow continuity;
  • load balancing;
  • network security;
  • session management;
  • preventing cross-site request forgery;
  • maintaining user-requested account functionality; and
  • recording cookie or privacy choices.

Where applicable law permits, these technologies may be used without optional consent because they are necessary to provide a service requested by the user.

They cannot always be disabled through YOU™ Cookie Settings because disabling them may prevent the requested service from functioning correctly.

Under current UK guidance, the strictly necessary exception is interpreted narrowly: the technology must be essential from the user’s perspective to provide the requested service, rather than merely useful to the website operator.

Strictly Necessary technologies may include technologies that:

  • keep a user logged into an account;
  • remember items during checkout;
  • protect account sessions;
  • maintain payment-flow continuity;
  • remember a user’s cookie-consent decision;
  • distribute traffic for reliable service operation; or
  • prevent security attacks.

A technology will not be treated as Strictly Necessary merely because it is commercially useful to YOU™.

Functional or Preference technologies may remember choices such as:

  • language;
  • interface preferences;
  • display settings;
  • accessibility settings; or
  • other optional functionality.

Some preference technologies may qualify for an applicable legal exception where they are genuinely necessary to provide functionality requested by the user.

Others may require consent or another legally permitted mechanism depending on the jurisdiction and technical implementation.

The live consent interface will determine how each active technology is classified.

YOU™ may use analytics or measurement technologies to understand matters such as:

  • number of visitors;
  • pages viewed;
  • navigation patterns;
  • website errors;
  • performance;
  • feature usage;
  • conversion events; and
  • general service effectiveness.

Analytics technologies will not be activated before any consent required by applicable law has been obtained.

Where applicable law permits a particular limited analytics technology to operate under a specific exemption or objection model, YOU™ may use that mechanism only if all legal conditions for that exemption are satisfied.

YOU™ will not automatically classify all analytics technologies as necessary.

If YOU™ uses an external analytics provider, the Cookie Settings should identify, where reasonably required:

  • provider;
  • purpose;
  • cookie or technology name;
  • category;
  • duration;
  • whether the technology is first-party or third-party; and
  • relevant privacy information.

The list of active technologies should reflect the actual production website.

YOU™ does not currently require behavioural advertising or cross-site tracking technologies to provide its core registration, certification or verification services.

If YOU™ later introduces technologies for purposes such as:

  • behavioural advertising;
  • personalised advertising;
  • cross-site tracking;
  • retargeting;
  • advertising profiling;
  • social-media advertising;
  • advertising measurement; or
  • similar targeted marketing,

the Cookie Policy and consent system will be updated before those technologies are activated where required.

Advertising technologies are not considered Strictly Necessary merely because advertising generates revenue. Current UK guidance expressly treats online advertising storage/access technologies as requiring consent rather than falling within the strictly necessary exception.

YOU™ may provide links to external social-media services.

A simple external link does not necessarily require YOU™ to place a social-media tracking technology on your device.

If YOU™ embeds social-media widgets, plugins, videos or other content that causes third-party tracking technologies to be stored or accessed, those technologies will be managed in accordance with applicable consent requirements.

Where necessary, embedded content may remain inactive until the required consent is given.

Payment providers may use technologies necessary to:

  • process payments;
  • prevent fraud;
  • authenticate transactions;
  • comply with financial-security requirements; and
  • maintain payment sessions.

Some payment technologies may be necessary for a transaction requested by the user.

Where a payment provider uses information for separate purposes beyond providing the requested payment functionality, the provider’s own terms and privacy information may apply.

YOU™ may use storage or access technologies reasonably necessary to:

  • detect malicious activity;
  • protect accounts;
  • prevent automated attacks;
  • reduce payment fraud;
  • protect forms;
  • authenticate sessions; or
  • maintain service security.

Where such technologies satisfy an applicable Strictly Necessary or security exception, they may operate without optional cookie consent.

Where applicable European rules require consent before information is stored on or accessed from a user’s device, YOU™ will obtain that consent before activating non-essential technologies.

For technologies requiring consent:

  • consent must be obtained before activation;
  • the user must receive sufficient information about the relevant purposes;
  • consent must result from an affirmative choice;
  • continuing to browse the website alone will not be treated as consent;
  • refusal must not activate the relevant non-essential technologies; and
  • consent may be withdrawn later.

Non-essential technologies should therefore remain blocked until the relevant choice has been made.

For users subject to UK privacy and electronic-communications rules, YOU™ will apply applicable PECR and UK GDPR requirements.

Current ICO guidance requires users to be informed about storage/access technologies and generally requires consent unless a valid exception applies. Consent must involve a clear affirmative action; non-essential cookies should not be placed before consent.

UK law now includes additional limited exceptions for certain statistical and appearance-related technologies, but those exceptions have specific conditions, including transparency and an easy means to object. YOU™ will rely on such an exception only where the actual technology satisfies the applicable conditions.

Where required, the initial YOU™ cookie interface should allow the user to make a genuine choice.

The first layer should normally provide options equivalent to:

Accept All

Reject Non-Essential

Manage Preferences

The interface should not make rejecting non-essential technologies materially harder than accepting them.

Optional categories should not be enabled through a pre-selected consent choice where applicable law requires affirmative consent.

The user should actively select or accept the relevant category.

Strictly Necessary technologies may remain enabled where they do not require optional consent.

Where appropriate, Cookie Settings may allow separate control over categories such as:

  • Strictly Necessary;
  • Preferences;
  • Analytics;
  • Advertising.

Strictly Necessary technologies may be shown as always active where applicable.

Users should not be required to accept Analytics or Advertising technologies in order to use ordinary YOU™ registration and verification functionality where those technologies are not necessary for that functionality.

Where processing is based on cookie consent, users may withdraw or change that consent.

Withdrawal should be possible through an accessible Cookie Settings mechanism.

Withdrawal applies to future use of the affected technologies.

It does not retrospectively make earlier processing unlawful if that processing was validly based on consent at the time.

The ability to withdraw consent should remain reasonably easy to find. The EDPB similarly provides users the ability to withdraw or renew analytics consent at any time.

YOU™ should maintain a persistent link or control such as:

Cookie Settings

or

Privacy Choices

through which users can reopen the consent interface.

This link should remain accessible after the initial cookie banner has been dismissed.

Rejecting non-essential cookies should not prevent ordinary access to the core YOU™ service where those technologies are not necessary.

Certain optional features may be unavailable if they genuinely depend on a particular optional technology.

Strictly Necessary technologies may continue to operate.

Users may also control cookies through their browser.

Depending on the browser, users may be able to:

  • delete stored cookies;
  • block all cookies;
  • block third-party cookies;
  • clear site data;
  • control local storage; or
  • configure privacy protections.

Browser-level blocking of Strictly Necessary technologies may cause parts of YOU™ to stop working.

For example, a user may be:

  • signed out;
  • unable to maintain a checkout session;
  • unable to retain shopping-cart information;
  • or unable to access certain account features.

Certain browsers or extensions may transmit privacy preference signals, including mechanisms such as Global Privacy Control.

Where applicable law requires YOU™ to recognise a qualifying preference signal for a relevant processing activity, YOU™ will implement appropriate handling.

A browser signal does not necessarily replace cookie consent requirements under European law unless the applicable legal framework recognises that signal as sufficient for the relevant processing.

Some browsers transmit a “Do Not Track” preference.

There is not a single universally applicable legal standard requiring all websites to interpret legacy Do Not Track signals in the same way.

YOU™ may nevertheless respect recognised technical signals where appropriate or legally required.

This section does not limit any obligation to honour a more specifically regulated opt-out preference signal.

Where YOU™ relies on consent, it may maintain evidence of the user’s choice.

Consent records may include:

  • consent status;
  • selected categories;
  • consent date and time;
  • consent mechanism version;
  • website or domain;
  • technical identifier necessary to remember the choice; and
  • withdrawal or update events.

This information may be necessary to demonstrate compliance and avoid repeatedly asking the user for the same choice.

Current ICO guidance also recommends keeping appropriate records of cookie consent.

YOU™ may use a necessary preference technology to remember whether you:

  • accepted;
  • rejected; or
  • configured

cookie categories.

A cookie or similar technology used solely to remember the user’s cookie preference may itself qualify for an applicable exception because it is necessary for the consent mechanism to function.

Such technology must not be repurposed for unrelated tracking.

YOU™ may ask users to renew or reconfirm cookie choices periodically where appropriate.

A renewed choice may also be requested if:

  • technologies materially change;
  • purposes change;
  • new providers are introduced;
  • legal requirements change; or
  • previous consent can no longer reasonably be treated as sufficiently informed.

YOU™ should not repeatedly display a consent banner without a legitimate reason merely to pressure users into accepting optional technologies.

Cookies and similar technologies are retained for different periods depending on their purpose.

Session technologies

Normally expire when the browser session or relevant session ends.

Persistent technologies

Remain for the duration specified in Cookie Settings or until deleted.

YOU™ should configure durations so that they are proportionate to the purpose for which each technology is used.

Because technologies used on a website may change as providers or functionality change, the most accurate list of active technologies should be maintained in the live Cookie Settings interface.

The live list should identify, where applicable:

  • technology or cookie name;
  • provider;
  • purpose;
  • category;
  • duration;
  • first-party or third-party status; and
  • any other legally required information.

The Cookie Policy should not list a technology as active unless it is actually used by the production website.

If YOU™ changes:

  • hosting provider;
  • payment processor;
  • analytics provider;
  • consent-management platform;
  • security provider;
  • embedded-content provider; or
  • advertising provider,

the relevant Cookie Settings and disclosures should be reviewed.

Where a new provider introduces a new non-essential technology, that technology should not be activated before any required consent mechanism has been implemented.

YOU™ may contain links to websites operated by third parties.

Once you leave YOU™, the third-party site’s own privacy and cookie policies apply.

YOU™ does not control cookies placed solely by an independent website after the user navigates away from YOU™.

Some providers of cookie or similar technology services may process information outside the user’s country.

Where the associated information constitutes personal data and applicable international-transfer rules apply, such transfers will be handled in accordance with the YOU™ Privacy Policy and applicable data-protection law.

Some cookies and similar technologies may process or generate information that constitutes personal data, including:

  • IP address;
  • device identifier;
  • session identifier;
  • browsing events;
  • account-linked events; or
  • other online identifiers.

Where this occurs, the processing is also subject to the YOU™ Privacy Policy.

Cookie consent and the GDPR legal basis for subsequent personal-data processing are related but legally distinct questions and will be assessed accordingly.

YOU™ is not directed at children for independent contractual use.

YOU™ does not intentionally use behavioural advertising technologies to profile children.

If future functionality materially changes the use of tracking technologies in relation to minors, YOU™ will conduct an appropriate legal and privacy assessment before activation.

YOU™ may update this Policy because of:

  • changes in website functionality;
  • changes in technologies;
  • new providers;
  • legal developments;
  • regulatory guidance;
  • changes in analytics;
  • advertising practices; or
  • changes to consent requirements.

The current revision date will be displayed at the top of this Policy.

Where appropriate, users may be asked to make a new cookie choice following a material change.

This Cookie Policy supplements the YOU™ Privacy Policy.

The Privacy Policy explains more broadly:

  • what personal data YOU™ processes;
  • purposes and legal bases;
  • recipients;
  • international transfers;
  • retention;
  • user rights; and
  • privacy contact information.

Where cookies or similar technologies generate personal data, both policies may apply.

Questions about cookies, tracking technologies or cookie consent may be sent to:

YOU™ / Unidia LLC 131 Continental Dr Newark, Delaware 19713 New Castle County United States

Email: [email protected]

Do not send passwords, authentication codes or complete payment-card information by email.

Before this Policy is treated as the final production Cookie Policy, YOU™ should perform an actual audit of the production website.

The audit should identify every cookie and similar technology used by:

  • WordPress;
  • WooCommerce;
  • account/login functionality;
  • payment providers;
  • security plugins;
  • hosting services;
  • analytics;
  • embedded content;
  • CAPTCHA or anti-bot tools;
  • social-media plugins;
  • support tools;
  • consent-management tools;
  • and any other third-party integration.

Each active technology should then be assigned to the correct category and entered into the live Cookie Settings interface with its actual purpose and duration.

YOU™ should not guess cookie names, providers or retention periods in the legal policy.

The practical YOU™ cookie rules are:

Strictly Necessary: may operate without optional consent where a valid legal exception applies.

Preferences: consent or another applicable exception depending on the actual purpose and jurisdiction.

Analytics: blocked until consent unless the particular implementation clearly satisfies an applicable legal exception.

Advertising and cross-site tracking: not activated without the consent or opt-out mechanism required by applicable law.

Rejecting optional cookies: must not block access to core YOU™ services where those cookies are unnecessary.

Consent: affirmative, informed and capable of being withdrawn.

Cookie Settings: should remain accessible after the initial banner closes.

Cookie list: must reflect the technologies actually running on the production website.