This Cookie Policy explains how Rapport Security Services Ltd ("we", "us", and "our") deploys cookies and related telemetry technologies to secure, analyze, and deliver our web platforms, including our public website and Secure Client Portals.

1. What are cookies and telemetry tokens?

Cookies are strictly controlled, encrypted data packets placed on your device to maintain session states, verify identity, and protect our architecture against automated cyber threats. We treat web telemetry with the same rigor as our physical threat intelligence.

2. How do we use cookies?

Our infrastructure deploys cookies exclusively for security, operational integrity, and analytical performance. We categorized them as follows:

A. Strictly Necessary Security Cookies (Always Active)

These are critical to the platform's survival and cannot be disabled. They include:

Session Fortification: Tokens that authenticate authorized users accessing the NOC Client Dashboard.
Anti-CSRF & Bot Mitigation: Cryptographic nonces that protect our forms (e.g., Data Subject Access Requests) from Cross-Site Request Forgery and automated spam injection.
Load Balancing: Cookies that distribute user traffic safely across our cloud architecture to maintain our 99.9% uptime SLA.

B. Performance & Latency Telemetry (Optional)

These allow us to measure API response times, latency, and page structural integrity.

Error Tracking: Logging anonymous crash data if a threat map fails to render.
Traffic Analytics: Aggregated, non-PII metrics to understand which sector case studies are driving interest.

We strictly prohibit the use of cross-site advertising trackers, behavioral profiling pixels, or third-party data broker injection scripts. Your operational security is paramount.

3. Managing Cookie Permissions

You retain absolute sovereign control over non-essential telemetry tracking:

Browser Controls: You can amend your web browser controls (e.g., Chrome, Safari, Firefox) to blanket-reject all cookies. However, disabling "Strictly Necessary" cookies will instantly revoke your access to the Secure Client Portal and administrative forms.
Do Not Track (DNT): Our servers natively respect browser-level DNT headers and will automatically suspend Category B (Performance) telemetry if detected.

For technical inquiries regarding our cryptographic token usage, please route requests to cybersec@rapportsecurity.com.