Cookie Statement

Why we use cookies

The SAAS website and online services uses cookies to:

  • To make sure our website works properly
  • To collect data about the use of our website including the number of visitors and how frequently the pages are viewed
  • To ensure the secure function of the SAAS online service
  • To remember your preferences and make the website easier to use

What are cookies

Cookies are small text files that are placed on your computer, smartphone, or other device by websites that you visit. They are widely used in order to make website work, or work more efficiently, as well as to provide information to the owners of the site. The cookies we use do not access your computer to obtain personal information and they do not collect information that could identify any user personally.

Different type of cookies

Session cookies – are small pieces of information that is held by the browser that is then attached to an individual users session. This lets the webpages know what section of the online application the student is on at any given point in time and as the cookie is relevant only to them it stops anyone on the same network being able to access the content they are using.

Persistent cookies – Remain on a user’s computer/device and is not deleted when the browser is closed. A persistent cookie enables a website to remember you on subsequent visits.

First party cookies – Are set by the website a user is visiting and they can only be read by that site.

Third party cookies – Are stored by a different domain to the visited page's domain.

Strictly necessary cookies – Essential in order to enable a user to move around a website and use its features, e.g. accessing secure areas of a website. You must accept these essential cookies in order to make use of our online system.

Performance cookies – Are used to collect information about how visitors use a website, for example which pages visitors go to most often. All information these cookies collect is anonymous. SAAS uses Google Analytics to measure and analyse usage of the website. View an overview of Google Analytics and its privacy policy.

Functional cookies – Allows the website to remember choices a user makes (e.g. your username, language), they provide more personal features.

What cookies do we use

Cookie Definition
Cookie type Name Purpose Expire
Third party, session persistent and performance: Google Analytics _utma

This is a persistence cookie and it is used to track the number of times you have been to the SAAS website and helps us to work how many unique visitors we have to the SAAS website. 2 years
_utmb This works with _utmc to calculate the average length of time you spend on SAAS website 30 mins
_utmc This works with _utmb to tell us when you leave the SAAS site. When browser session ends
_utmz Tells us how you got to the SAAS website e.g. what search engine was used, what links you clicked 6 months
Third party, session and persistent, Google Universal Analytics _ga Used by the student portal and online payments application to distinguish users 2 years
_gat Used in the student portal and online payment application to manage the rate at which page view requests are made. 10 minutes
_gid Used by online payment application to distinguish users. 24 hrs
Functional, Cookie Control civicAllowCookies This cookie is used to record if you have accepted/unaccepted the use of cookies. A cookie is set in order to remember your preferences When browser session ends
First party, strictly necessary and session JSESSIONID Is an Id generated by tomcat for session management. It is used to retain information about your session. When browser session ends
First party, strictly necessary and session Routeid It is used to retain information about your session from our webserver. It retains information on where you are in the application process. 1 year
OpenAm Session iPLanetDirectoryPro The session contains information about the interaction between the client and the server End of Session

Cookies provided on

Cookie Definition
Cookie type Name Purpose Expire
Marketo   2 years
Functional mhVisitorld Used to find out what pages visitors are going to 9 months
Third party ‘Optimizely’ cookies optimzelyBuckets

Used to store the different version of a webpage variants for better comparison and performance testing to ensure the user gets a consistent experience 10 years
optimizelyEndUserId Performance of the user’s experience and the appearance of the site 10 years
optimzelyPendingLogEvents This works with _utmb to tell us when you leave the SAAS site. 10 years
optimzelySegments Performance of the user’s experience and the appearance of the site 10 years

Further information on cookies used by business worldpay can be found at

Accepting cookies

In preparation for the new General Data Protection Regulations which come into force in May 2018, we are working to change the way our website works and actively get your consent for these cookies. At present this consent is not in place.

The cookies on the SAAS website are currently enabled by default but may be turned off by clicking ‘Cookie Control’ slider. If you do not turn cookies off, we will consider this as your consent for the setting of cookies on your computer and the cookie.

If you decide to turn cookies off, no cookies will be stored on your computer for the duration of your session apart from one cookie which is to remember your preference. However, this does mean that certain personalised services cannot be provided.

Our online services uses essential load balancing session cookies that do not require your consent.

How to control cookies

You can control cookies through your browser settings, this includes being able to restrict and block cookies. Although, please be aware that restricting or blocking cookies may impact on the functionality of the SAAS’s webpages. Many third party cookies can be safely blocked.

You can find more comprehensive information on how to control, restrict and block cookies by visiting

SAAS uses Google Analytics to measure and analyse usage of the website. To opt out visit uses third party cookies served by Optimizely from the domain for the purpose of comparing two versions of the same website page. This allows Worldpay the opportunity to create better websites. Further information about Optimizely's use of user data is available in their privacy policy at Details on how to opt out of all Optimizely tracking are available at

IP address and hostname

An IP address is the numeric address of a computer. The IP address recorded on website log files is the address provided by your internet service provider’s equipment and not your own personal computer’s address.

Hostnames are similar in appearance to the domain names you see in URLs and email addresses. The hostnames recorded on website log files are those of the internet service provider’s equipment that you are using to access the internet, and not your own computer’s name or location.

Your internet service provider will keep records of which customer is using any IP address or hostname at any given time, and so it is theoretically possible to trace back activity shown on any website log file to a specific individual. In practice, this can only be done with the explicit involvement of the internet service provider, and such a trace would therefore only take place in the event of serious criminal misuse of the internet and would be carried out by the police.

SAAS will not attempt to associate IP addresses and hostnames with individuals. In the event of serious criminal misuse of the website, the matter would be referred to the police for investigation.