Cookie Policy

Updated: June 2026

Applies to: www.xyzreality.com and cloud.xyzreality.com.
Jurisdiction: UK GDPR & EU GDPR (UK PECR), Data (Use and Access) Act (DUAA) 2025
This policy should be read alongside the XYZ Reality Privacy Policy.

1. What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or other device) when you visit a website. They are widely used to make websites work, improve efficiency, and provide information to website owners. Similar technologies, such as web beacons, pixels, and local storage (collectively referred to as “cookies” in this policy), work in a comparable way. Cookies are set either by us (first-party cookies) or by third-party services we use on our site (third-party cookies).

2. Who We Are

XYZ Reality Limited (“we”, “us”, “our”) is the data controller for cookies set on the website located at https://www.xyzreality.com; and cloud.xyzreality.com. For queries about this policy, please contact privacy@xyzreality.com.

3. Legal Basis for Using Cookies

We use cookies in accordance with the UK Privacy and Electronic Communications Regulations 2003 (UK PECR) and the EU ePrivacy Directive (2002/58/EC as amended), which require us to obtain your consent before placing any non-essential cookies; and the UK GDPR and EU GDPR (Regulation (EU) 2016/679); and the Data (Use and Access) Act (DUAA) 2025, which govern how we handle personal data collected through cookies. Strictly necessary cookies enable the operation of a functional, secure website and do not require consent. All other cookies are placed only with your freely given, specific, informed, and unambiguous consent, provided through our consent management tool (Cookiebot).

4. How We Obtain and Manage Your Consent

When you first visit our website, a cookie consent banner is displayed. You can accept all cookies (necessary, preferences, statistics, and marketing); accept only necessary cookies and reject all non-essential cookies; or customise your preferences by category. Non-essential cookies are not activated until you have made a positive choice, and you are not required to accept them to use our website (although some features may be limited). You can change or withdraw your consent at any time via the “Cookie Settings” link in our website footer. Your chosen settings are stored in a consent record cookie (CookieConsent) for up to one year, after which (or if our cookie use changes materially) we will re-prompt you. Please include your consent ID and the date of consent when contacting us about your consent record.

5. Categories of Cookies We Use

5.1 Strictly Necessary Cookies

Essential to provide the services available through our website and to enable you to use certain features. Without these, the services you request cannot be provided. They do not collect information that could be used for marketing.

Consent required: No consent required — PECR reg 6(4) strictly necessary exemption; any resulting personal data processed under UK/EU GDPR Art 6(1)(f) legitimate interests.

5.2 Functionality Cookies

Allow our website to remember choices you make (such as your language or region) and provide enhanced, personalised features.

Consent required: Yes. Legal basis: Consent (UK GDPR Art. 6(1)(a) / EU GDPR Art. 6(1)(a)).

5.3 Statistics / Analytics Cookies

Collect information about how visitors use our website — for example which pages they visit most often — to help us understand usage and improve our service. Some of these technologies (including Google Analytics) rely on unique identifiers that are treated as personal data, so this information is not fully anonymous.

Consent required: Yes. Legal basis: Consent (UK GDPR Art. 6(1)(a) / EU GDPR Art. 6(1)(a)).

5.4 Marketing / Targeting Cookies

Used to deliver advertising more relevant to you, to limit how often you see an advertisement, and to measure the effectiveness of campaigns. They are usually placed by advertising networks with our permission and may be linked to site functionality provided by other organisations.

Consent required: Yes. Legal basis: Consent (UK GDPR Art. 6(1)(a) / EU GDPR Art. 6(1)(a)).

6. Third-Party Cookies and International Transfers

Some cookies on our website are set by third-party services we use, such as analytics providers, advertising platforms, and embedded content providers (e.g. YouTube). These third parties may collect information about your online activities across different websites and over time. Several are based in, or transfer data to, countries outside the UK and/or EEA, including the United States. Where data is transferred internationally, we rely on appropriate safeguards, which may include UK adequacy regulations, European Commission adequacy decisions, Standard Contractual Clauses approved under UK or EU GDPR, or other approved transfer mechanisms under Article 46. Cookies from providers where we cannot confirm an adequate mechanism are blocked until you provide consent. Some Necessary cookies are set by Cloudflare (__cf_bm, _cfuvid) acting as a data processor on our behalf to protect our website from automated threats.

7. How Long Cookies Are Stored

The duration for which a cookie remains on your device depends on its type. Session cookies are deleted automatically when you close your browser; persistent cookies remain until they expire or you delete them manually (specific retention periods are set out in Appendix 1). We apply the principle of storage limitation and do not retain cookie data for longer than is necessary.

8. Your Rights

Under UK GDPR and EU GDPR, where cookies process personal data, you have the right of access, rectification, erasure, restriction of processing, objection (to processing based on legitimate interests), and withdrawal of consent to non-essential cookies at any time via our cookie settings tool (withdrawal does not affect prior processing). You also have the right to lodge a complaint with the ICO (ico.org.uk) or your local EU data protection authority. To exercise your rights, contact privacy@xyzreality.com.

9. Managing Cookies Through Your Browser

In addition to our consent management tool, most web browsers allow you to view cookies stored on your device, block cookies from being set, and delete all or specific cookies. Restricting cookies may impact the functionality of our website. Instructions vary by browser — please consult your browser’s help documentation, or visit aboutcookies.org or allaboutcookies.org for more information.

10. Effect of Disabling Cookies

If you disable or reject certain cookies, some parts of our website may not function correctly. Disabling necessary cookies may prevent you from accessing secure areas or using core features; disabling preference cookies means you may need to re-enter settings each visit; and disabling analytics or marketing cookies will not prevent you from using the website but will limit our ability to improve our service and deliver relevant advertising.

11. Changes to This Policy

We may update this Cookies Policy from time to time to reflect changes in technology, legislation, or our data practices. When we make material changes, we will display a prominent notice on our website and, where appropriate, seek fresh consent.

12. Contact Us

If you have any questions, concerns, or requests relating to this Cookies Policy or our use of personal data, please contact XYZ Reality Limited at privacy@xyzreality.com (website: xyzreality.com/cookies-policy). You may also contact the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Appendix 1 — Full Cookie Register

The table below lists the cookies currently identified on our website (www.xyzreality.com and cloud.xyzreality.com), organised by category. This register is generated and maintained via Cookiebot and is reviewed at least annually or whenever our cookie use changes. All non-necessary cookies are blocked until the user provides consent via the cookie banner.