Legal / UK

Cookie Notice

Last updated: 1 September 2026

George Hailey trading as CompositeBid is the operator responsible for this notice.

How CompositeBid uses cookies

CompositeBid currently uses cookies only where needed to provide and protect supplier, buyer and administrator account access. We do not currently use advertising, analytics or cross-site tracking cookies.

Account authentication

Supabase authentication stores a secure session cookie after an authorised account signs in. It allows the website to recognise and safely refresh that session and restrict protected pages by role. The production cookie is HttpOnly, Secure, SameSite=Lax and limited to the CompositeBid website.

The cookie may remain on the device for up to approximately 400 days while the authentication library manages session refresh. Logging out removes the browser session, and server-side checks prevent a revoked or deleted account from using an old cookie to access protected pages.

Your choices

Because the authentication cookie is needed to provide the supplier login requested by the user, blocking it will prevent protected account areas from working. You can remove it by logging out or by clearing cookies in your browser.

Future cookie use

If CompositeBid introduces non-essential analytics, advertising or similar cookies in future, this notice and the website's consent controls will be updated before those cookies are set.

Contact

For questions about cookies or privacy, email hello@compositebid.com or read the Privacy Notice.