Vitality Logo

Cookies

What they are and how we use them

Cookies

We use cookies to make sure you always see the best possible version of our website. They’re how we personalise your visit and how you can get to the pages you use more quickly.

What are cookies?

They’re text files formed by small bits of data, which download to your device when you visit a website. When you re-visit that website – or any other website that recognises that cookie – your device sends it back again.

By using our website, you agree that we can place cookies on your device. But remember, the cookies we use don’t contain your personal information and we can’t identify you from them.

Why we need them

Cookies allow a website to recognise a user's device and serve up more relevant content. They also help keep your device – and our systems – more secure.

What cookies do we use?

We use four types of cookies. Some you have to use, others you don’t. The four types are:

  • Strictly necessary cookies – without these cookies, our site may not load properly. Find out more
  • Performance cookies – these tell us how visitors use our website. The information they collect is anonymised. It’s only used to improve how a website works. Find out more
  • Functionality cookies - These allow a website to remember choices you make on a site e.g. your username, language or the region you’re in. The information they collect is anonymised, so they can’t track your activity on other sites. Find out more
  • Targeting cookies - These deliver adverts to your device. They’re usually placed by advertising networks with the website operator's permission. This information is shared with other organisations such as advertisers. Find out more

To opt out of any of these cookies, you need to change your browser settings.

To find out how, visit your browser provider e.g. Chrome, Firefox, Internet Explorer, Opera, Safari, etc.

For more information on Cookies:

Our cookies

Category 1: Strictly necessary cookies

These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies, services you have asked for, like shopping baskets or e-billing, cannot be provided.

Accepting these cookies is a condition of using the website, if you prevent these cookies we can't guarantee or predict how our website will perform during your visit.

Our strictly necessary cookies:

Software  Cookies  Description 
Amazon AWS  AWSELB | AWSELBCORS  This cookie is associated with the Amazon Web Services Elastic Load Balancing functionality for routing client request on the server.
Google Tag Manager  _dc_gtm_UA-xxxxxxxx This cookie is associated with sites using Google Tag Manager to load other scripts and code into a page. Where it is used it may be regarded as Strictly Necessary as without it, other scripts may not function correctly. The end of the name is a unique number which is also an identifier for an associated Google Analytics account.
Microsoft ASP.NET_SessionId (sometimes listed as PPSid) | __RequestVerificationToken General purpose platform session cookie, used by sites written with Microsoft.NET based technologies. Usually used to maintain an anonymised user session by the server. | This is an anti-forgery cookie set by web applications built using ASP.NET MVC technologies. It is designed to stop unauthorised posting of content to a website, known as Cross-Site Request Forgery. It holds no information about the user and is destroyed on closing the browser.
Vitality
OpenIdConnect.nonce. Used to validate the identity token received from the Identity Provider (IdentityServer). It is a session cookie, but the information contained expires in 1 hour
visid_incap | incap_ses_ Incapsula DDoS Protection and Web Application Firewall: cookie for linking certain sessions to a specific visitor (visitor representing a specific computer). In order to identify clients that have already visited Incapsula. The only cookie that is persistent for the duration of 12 months. | Cookie for linking HTTP requests to a certain session (AKA visit). Re-opening the browser and accessing same site are registered as different visits. In order to maintain existing sessions (ie, session cookie)
JSESSIONID Java session cookies. A unique session identifier assigned by a WebServer, which lasts for the duration of the current session on the website. Usually used to maintain an anonymous user session by the server.
PHPSESSID PHP session cookie associated with embedded content from this domain.
nlbi_XXXXXXX To ensure requests by a client are sent to the same origin server.
bp_user-registered | bp_user-role | bp_ut_session These cookies are used by the website to determine which users should have access to private pages on the site. If you block this cookie you will not be able to use the site.
hasSeenCookieMessage This cookie records when you have seen and accepted the cookie warning message.

Category 2: Performance cookies

These cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don't collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.

By using our website, you agree that we can place 'Performance cookies' on your device. Accepting these cookies is a condition of using the website, if you prevent these cookies we can't guarantee or predict how our website will perform during your visit.

Our performance cookies:

Software
Cookies Description
Dynatrace  dtCookie | dtLatC | dtPC These cookies are associated with, software from Dynatrace, an application performance management (APM) software company. Their software manages the availability and performance of software applications and the impact on user experience in the form of deep transaction tracing, synthetic monitoring, real user monitoring, and network monitoring.
Dynatrace  dtSa This cookie is used to save action names across pages so that performance can be monitored across pages.
 rxvt   This cookie is used to store two timestamps to determine session length and the end of a session.
Google Analytics 
 _ga Google Analytics is a service offered by Google that generates detailed statistics about the visitors to a website. Their cookies are used to store details on how long a visitor spends on a website and where they came from. We use the information to improve the website. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.
 _gat  Used by Google Analytics to throttle request rate.
 _gat_UA-nnnnnnn-nn  This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.
 _gclxxxx  Google conversion tracking cookie
 _gid  The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number of visitors, the source where they have come from, and the pages visited in an anonymous form.
 utm  UTM works as a custom URL for marketing campaigns and reports can be viewed in platforms like Google Analytics. UTM tags are appended as part of the visible URL in marketing programs for understanding visitors to our website – for example, if they have visited the website, clicked on a link or signed up to a conference/event. These details are collected at an aggregated level. Customizing the URL with UTM tags allows us to better understand the marketing activity, which then allows us to better serve our audience
 ABTasty  ABTasty | ABTastySession | ABTastyDomainTest   These cookies are part of ABTasty, used to determine a user’s inclusion in an A/B experiment via ABTasty and the expiry of experiments a user has been included in. ABTasty is used to enhance user experience on our website. 
 Microsoft Azure
 ai_session  This cookie name is associated with the Microsoft Application Insights software, which collects statistical usage and telemetry information for apps built on the Azure cloud platform. This is a unique anonymous session identifier cookie.
 ai_user  This cookie name is associated with the Microsoft Application Insights software, which collects statistical usage and telemetry information for apps built on the Azure cloud platform. This is a unique user identifier cookie enabling counting of the number of users accessing the application over time.
 Microsoft Bing ads  _uetvid  This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website.
 Infinity
 ictf_master  Unique Visitor Ref

Stores the unique Visitor Reference
 ictf_il  Tracking Source cache

Contains per installation tracking source cache
ictf_in   Number Replacement Source cache

Contains per installation number replacement source cache
 ict_0  Third Party Source cache

Contains third party tracking and number replacement source cache
 ict_master  Unique Visitor Ref

Stores the unique Visitor Reference
 Sitecore Analytics  SC_ANALYTICS_GLOBAL_COOKIE  This cookie name is associated with the Sitecore Content Management System as is used for web analytics to identify repeat visits by unique users
 Sitecore CDP
 The bid_{clientKey} cookie  This cookie persists the browser ID between sessions. It generates a Universally Unique Identifier (UUID) that is unique per browser until the cookie expires or is deleted, then a new UUID is generated. Sitecore CDP data capture cookies expire after two years of inactivity.
 The bx_bucket_number cookie  This cookie is used in Web Experiments and allocates the Visitor to a specific variant when using audience allocation. It performs allocation for each Web Experiment that is live on our site during the particular session. This session cookie is only stored for the duration of the session.
The boxever_test cookie   This cookie checks that the other cookies are working as expected then is immediately removed from the visitor's device.
 Hotjar    We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
 AWIN  utm  UTM works as a custom URL for marketing campaigns and reports can be viewed in platforms like Google Analytics. UTM tags are appended as part of the visible URL in marketing programs for understanding visitors to our website – for example, if they have visited the website, clicked on a link or signed up to a conference/event. 

These details are collected at an aggregated level. Customizing the URL with UTM tags allows us to better understand the marketing activity, which then allows us to better serve our audience.

Category 3: Functionality cookies

These cookies allow the website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. For instance, a website may be able to provide you with local weather reports or traffic news by storing in a cookie the region in which you are currently located. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.

By using our website, you agree that we can place 'Functionality cookies' on your device. Accepting these cookies is a condition of using the website, if you prevent these cookies we can't guarantee or predict how our website will perform during your visit.

Our functionality cookies:

Software  Cookies  Description 
Dynatrace  rxVisitor
 This cookie is used to store an anonymous ID for the user to correlate across sessions on the world service.
 Google Analytics  ___utmv  Custom google analytics Variables. This cookie provides information to the user-defined report in Google Analytics so that it knows how to classify visitors.
 Imperva  reese84 | x-d-token  This cookie persists the token used to grant access to protected endpoints. For more information, please view the imperva.com website.
 Medalia
 kampyleSessionPageCounter  Counts the number of pages a user views within a single session. This cookie is commonly associated with customer survey and feedback functionality on a website, using software from Kampyle Ltd.
 kampyleUserSession   A unique ID for this specific session. This cookie is commonly associated with customer survey and feedback functionality on a website, using software from Kampyle Ltd.
 kampyleUserSessionsCount  Counts the number of sessions per user. This cookie is commonly associated with customer survey and feedback functionality on a website, using software from Kampyle Ltd.
 kampyle_userid  A user ID. This cookie is commonly associated with customer survey and feedback functionality on a website, using software from Kampyle Ltd.
 kampyleInvitePresented  Profiling cookie, flag indicating whether an intercept was presented in the session. This cookie is commonly associated with customer survey and feedback functionality on a website, using software from Kampyle Ltd.
 kampyleUserPercentile  Profiling cookie, number between 0-1 used for percentage of users targeting. This cookie is commonly associated with customer survey and feedback functionality on a website, using software from Kampyle Ltd.
 md_isSurveySubmittedInSession  Records information about the visitor’s session on the Medallia client’s domain, such as the number of pages a respondent has visited in their session. This cookie is commonly associated with customer survey and feedback functionality on a website, using software from Kampyle Ltd.
 cd_user_id  Medallia feedback survey Unique id that identifies the user’s session.
 Vitality  catAccCookies  This cookie is used to manage a cookie consent plugin to record the end user's acceptance that the site uses cookies.

Category 4: Targeting cookies

These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator's permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.

Preventing these cookies may stop us from offering you some services. All of these cookies are managed by third parties, and use the third parties' own tools to prevent these cookies.

Our targeting cookies include:

Software
Cookies
 Description
Facebook fr
 Contains browser and user unique ID combination, used for targeted advertising.
 _fbp Used to deliver a series of advertisement products such as real time bidding from third party advertisers.
CAPI   Server to server connection between META and Vitality
 Google
 _dlt | IDE | test_cookie This domain is owned by DoubleClick (Google). The main business activity is: DoubleClick is Google's real time bidding advertising exchange
 _GRECAPTCHA | NID  reCAPTCHA is a SPAM protection service provided by Google that helps protect websites from spam and abuse. It may analyse traffic,with the purpose of filtering the parts of traffic recognized as Bots or SPAM.
 LinkedIn
 lissc | lang | lidc | UserMatchHistory | bcookie | AnalyticsSyncHistory |bscookie This domain is owned by LinkedIn, the business networking platform. It typically acts as a third party host where website owners have placed one of its content sharing buttons in their pages, although its content and services can be embedded in other ways. Although such buttons add functionality to the website they are on, cookies are set regardless of whether or not the visitor has an active LinkedIn profile, or agreed to their terms and conditions. For this reason it is classified as a primarily tracking/targeting domain.
lang  This domain is owned by LinkedIn, the business networking platform. This sub-domain is connected with LinkedIn's marketing services that enable website owners to gain insight into types of users on their site based on LinkedIn profile data, to improve targeting.
Microsoft (Bing ads)
 _uetsid This cookie is used by Bing to determine what ads should be shown that may be relevant to the end user perusing the site.
 MUID  Microsoft User Identifier tracking cookie used by Bing Ads
 Twitter  personalization_id This cookie is set to measure the performance of advertising campaigns through Twitter, across different browsers and devices used by a visitor.
 Yahoo  A3 | B Collects information on user behaviour on multiple websites. This information is used in order to optimize the relevance of advertisement on the website.
 YouTube  VISITOR_INFO1_LIVE  This cookie is used as a unique identifier to track viewing of videos
 GPS YouTube enters this cookie when you watch a YouTube video through our website. GPS data for mobile users
CONSENT  YouTube enters this cookie when you watch a YouTube video through our website
 YSC YouTube enters this cookie when you watch a YouTube video through our website. Unique session id for that visitor
 Display
 59A 59A is a technology business built to deliver opportunity within media planning and buying. They do this through the creation and deployment of custom algorithms across any media channel accessible through programmatic, e-commerce, and social platforms.
Adlede  Developer of a machine learning platform designed to offer contextual data to target relevant media content to advertisers
 Admaxim  AdMaxim is an advanced full stack programmatic advertising system that enables Agencies To Research, Plan, Create, Deliver and Optimize precision targeted campaigns 
InVibes InVibes proprietary technology platform helps brands reach consumers through in-feed advertising that creates positive attention.
Pinterest   UPT  Contains browser and user unique ID combination, used for targeted advertising.
 TikTok  personalization_id This cookie is set to measure the performance of advertising campaigns through TikTok, across different browsers and devices used by a visitor.
 Display  Ogury Ogury is a mobile display advertising technology, anchored in consumer privacy protection for their advertisers to ensure

If you wish to opt out of any of the above cookies you will need to change your browser settings. For further details please visit the relevant provider –

More information on Cookies: