Legal · Document 02

Cookie Policy

How Procurement Institute uses cookies and similar tracking technologies to operate the site, measure performance, and provide user experience features — and how to control them.

Last updated · 24 April 2026Version 1.0← Back to Legal
Section 01

What this document covers

This Cookie Policy explains the cookies, web beacons, local storage, and similar tracking technologies (“Trackers”) used by procurementinstitute.io and related Procurement Institute services.

For simplicity, all such technologies are referred to here as “Trackers” — though where the distinction matters (for example, when a browser-specific mechanism is being referenced), we use the term “Cookies” specifically.

Trackers are managed directly by Procurement Institute (so-called first-party Trackers) and by third parties whose services we integrate (so-called third-party Trackers). Unless stated otherwise, third-party providers may also access the Trackers they manage on our site.

The validity and expiration of Trackers vary depending on the provider. Some expire at the end of your browsing session; others persist for longer periods. Details of the retention periods applicable to specific Trackers are available in the linked privacy policies of each provider.

This policy should be read alongside our Privacy Policy, which sets out the broader framework of how personal data is processed at Procurement Institute.

Section 02

Owner and Data Controller

Commercium Mundi Ltd, trading as Procurement Institute
71–75 Shelton Street, Covent Garden
London, United Kingdom, WC2H 9JQ
team@procurementinstitute.io

For the full data controller disclosure and the broader framework of personal data processing, see Section 1 of our Privacy Policy.

Section 03

Strictly necessary Trackers

We use the following Trackers for activities strictly necessary to operating the site or delivering the service. These Trackers are always active and do not require consent.

Webflow — website hosting and form submission handling, provided by Webflow, Inc. Place of processing: United States. Personal data processed: Trackers, usage data. See Webflow’s Privacy Policy.

Cloudflare — traffic optimisation, DDoS protection, and content distribution, provided by Cloudflare, Inc. Place of processing: United States and distributed global edge network. Personal data processed: Trackers, usage data. See Cloudflare’s Privacy Policy.

Google Hosted Libraries — distribution of common web libraries used by the site, provided by Google Ireland Limited. Place of processing: Ireland. Personal data processed: Trackers, usage data. See Google’s Privacy Policy.

Section 04

Experience Trackers

We use the following Trackers to improve the quality of the user experience and enable interactions with external content, networks, and platforms. These Trackers are set only after you give consent through our cookie consent mechanism.

Google Fonts — typography delivery, provided by Google Ireland Limited. Place of processing: Ireland. Personal data processed: Trackers, usage data. See Google’s Privacy Policy.

PostHog surveys — in-app surveys and feedback collection when enabled, provided by PostHog, Inc. Place of processing: United States. Personal data processed: answers to questions, device information, browser information, usage data, IP address, and email address where provided. See PostHog’s Privacy Policy.

Section 05

Analytics and measurement Trackers

We use the following Trackers to measure traffic and analyse user behaviour to improve the service. These Trackers are set only after you give consent through our cookie consent mechanism.

PostHog product analytics — web analytics and behavioural measurement, provided by PostHog, Inc. Place of processing: United States. Personal data processed: browser information, device information, IP address, page views, clicks, browsing history, usage data. See PostHog’s Privacy Policy.

PostHog session replay — visual recording and replay of visitor sessions for usability analysis. Input fields containing personal data are masked by default and not recorded. Place of processing: United States. Personal data processed: device information, usage data, session interaction data. Sessions are retained for 30 days.

PostHog feature flags and A/B testing — content and feature variation testing. Place of processing: United States. Personal data processed: device information, browser information, usage data, IP address.

Section 06

Managing your preferences

You can set or update your cookie preferences at any time through the following channels.

The Your Privacy Choices link in the site footer opens the preferences panel provided by iubenda, where you can accept, reject, or customise consent by category.

Your browser settings allow you to view, block, or clear cookies across all sites. Browser-level controls do not allow granular per-category consent, but they are a useful fallback. Guides for the most common browsers: Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge, Brave, and Opera.

Your device settings on mobile devices allow you to opt out of certain categories of tracking. Look for the advertising or tracking section in your operating system’s privacy settings.

With regard to third-party Trackers specifically, you can also manage preferences through the opt-out mechanisms provided in each third party’s privacy policy (linked in Sections 3, 4, and 5).

Section 07

Consequences of denying consent

You are free to decide whether to grant consent to non-essential Trackers. Declining consent means that some features relying on those Trackers — analytics measurement, session replay for usability improvement, surveys, A/B testing — will be disabled for your session.

Strictly necessary Trackers (Section 3) will continue to operate regardless of consent, as they are required for the site and service to function. These include web hosting, content delivery, and library distribution.

Section 08

Compliance-monitored version and contact

A continuously-maintained version of this Cookie Policy — updated by iubenda as laws, regulations, and third-party service configurations change — is available at:

iubenda Cookie Policy — procurementinstitute.io

For all data protection inquiries, data subject requests, and questions about this policy:

Commercium Mundi Ltd, trading as Procurement Institute
71–75 Shelton Street, Covent Garden
London, United Kingdom, WC2H 9JQ
team@procurementinstitute.io

This Cookie Policy should be read alongside our Privacy Policy and Terms of Use.