Cookies without the confusion.
How TILBAJ Education should use cookies, local storage and similar technologies—and how visitors stay in control.
1. What cookies and similar technologies are
Cookies are small files stored on a device. Similar technologies can include local storage, tracking pixels, scripts, tags, device identifiers and other methods that store information on, or access information from, a user's device.
The UK ICO's 2026 guidance makes clear that PECR can apply to a wider range of storage/access technologies—not just traditional cookies.
2. Current TILBAJ website approach
The approved TILBAJ Education prototypes are designed to minimise tracking. Core content does not require advertising trackers. Some workflows may use local browser storage for functions such as saving an application draft or remembering a consent choice.
3. Categories we may use
| Category | Purpose | Consent approach |
|---|---|---|
| Strictly necessary | Security, load balancing, session integrity, consent storage and features specifically requested by the user. | May be used where an applicable legal exception allows. |
| Functional / preferences | Remembering non-essential preferences or enhanced features. | Consent where required. |
| Analytics | Understanding aggregate site usage and performance. | Do not enable until the required consent is obtained unless a specific legal exception clearly applies. |
| Marketing / advertising | Cross-site measurement, remarketing or behavioural advertising. | Prior valid consent required where applicable. |
4. Consent and choice
Where consent is required, it should be freely given, specific, informed and indicated by a clear positive action. Non-essential cookies/storage should not be set merely because a visitor continued browsing. Users should be able to reject non-essential categories and change their choices later without unnecessary friction.
5. Production cookie inventory
The live site should publish an automatically maintained or regularly audited table listing each non-essential technology, provider, purpose and duration. A recommended structure is shown below.
| Name / provider | Category | Purpose | Duration |
|---|---|---|---|
| Consent preference | Strictly necessary | Remember cookie choices | Confirm at deployment |
| Application draft local storage | Requested functionality | Save a local draft on the user's device | Until cleared / browser storage is removed |
| Analytics tool (if enabled) | Analytics | Site measurement | Insert audited live value |
| Advertising tag (if enabled) | Marketing | Campaign measurement / advertising | Insert audited live value |
6. Third-party technologies
Embedded videos, maps, social-media content, analytics, CRM/chat tools and advertising platforms can place or access information on a device. Where possible, TILBAJ should use click-to-load or consent-gated integrations so non-essential third-party technology does not activate before the user's choice.
7. How to manage cookies
Users should be able to reopen the site's cookie preferences and change non-essential categories. Browsers also provide controls to delete or block cookies/storage, although blocking essential storage can affect functionality.
8. Legal framework and sources
Nigeria's data-protection framework requires fair, lawful and accountable processing of personal data. Where UK users or UK electronic-communications rules are in scope, PECR and UK data-protection requirements may also apply. ICO guidance states that users must be told about storage/access technologies and, unless an exception applies, prior consent to the required standard must be obtained.
9. Updates and contact
We may revise this policy when our website technology changes. Questions can be sent to info@tilbajconsult.com.
Questions about this policy?
Contact TILBAJ Education and we will route your enquiry to the appropriate team.