Cookie Policy of Howden Group Holdings

Welcome to the cookie policy of Howden Group Holdings. This policy will help you understand what cookies and tracking technologies we use, how we use them and what your rights are in relation to it

Latest update: 10 September 2025

Introduction

This document informs Users about the technologies that help Howden Group Holdings to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with Howden Group Holdings.

For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.

Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.

Howden Group Holdings uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information – such as the presence of other Trackers - in the linked privacy policies of the respective third-party providers or by contacting the Owner.

Owner and Data Controller

Howden Broking Group Ltd
One Creechurch Place
London
EC3A 5AF
United Kingdom


As the Data Controller, Owner ensures that third-party Trackers used on Owner’s website comply with any regulations related to Privacy & Data Protection. Third-party cookies or trackers are only used on this website after Users give their explicit consent. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.

Owner contact email: dpo@howdengroup.com

How Howden Group Holdings uses Trackers

Necessary

Howden Group Holdings uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.

Technical trackers

Trackers name Trackers duration
howden_country30 days
apbct_timestampduration of the session
apbct_cookies_testduration of the session
SSESS2207ef6406018b61b239fc7235a5f9c724 days
dtm_cookietime_dismissed1 year
apbct_prev_refererduration of the session
webformduration of the session
iub_storage_available1 year
.EBSCORE$1-CorrelationIdduration of the session
.EBSCORE$1-timezone13 months
.EBSCORE$1-culture13 months
___utmvc19 seconds
.EBSCORE$1-theme4 months
reese841 month
B2CSessionIdParamduration of the session
sessionExpiryMomentindefinite
ujh_a92bf061-37f6-4d6d-85cd-4d88b0ff85d2__duration of the session

Trackers managed by third parties

Cloudflare, Inc.

Cloudflare Bot Management

Company: Cloudflare, Inc.

Place of processing: United States

Personal Data processed: app information +37

Cloudflare Bot Management is a malicious bot protection and management service provided by Cloudflare, Inc.

Personal Data processed:
  • app information
  • Application opens
  • browser information
  • browsing history
  • city
  • clicks
  • country
  • county
  • custom events
  • device information
  • device logs
  • geography/region
  • interaction events
  • IP address
  • keypress events
  • language
  • latitude (of city)
  • launches
  • longitude (of city)
  • metro area
  • motion sensor events
  • mouse movements
  • number of sessions
  • operating systems
  • page events
  • page views
  • province
  • scroll position
  • scroll-to-page interactions
  • search history
  • session duration
  • session statistics
  • state
  • touch events
  • Trackers
  • Usage Data
  • video views
  • ZIP/Postal code
Service provided by:
Trackers duration:
  • __cf_bm: 3 seconds
  • __cfruid: duration of the session
  • _cfuvid: indefinite
  • cf_clearance: 30 minutes
  • cf_ob_info: 3 seconds
  • cf_use_ob: 3 seconds
  • cfmrk_cic: 3 months
iubenda srl

iubenda Privacy Controls and Cookie Solution

Company: iubenda srl

Place of processing: Italy

Personal Data processed: IP address +1

The iubenda Privacy Controls and Cookie Solution allows the Owner to collect and store Users’ preferences related to the processing of personal information and in particular to the use of Cookies and other Trackers on Howden Group Holdings.

Personal Data processed:
  • IP address
  • Trackers
Service provided by:
Trackers duration:
  • _iub_cs-*: 1 year
  • usprivacy: 1 year
New Relic

New Relic

Company: New Relic

Place of processing: United States

Personal Data processed: browsing history +7

New Relic is a monitoring service provided by New Relic Inc. The way New Relic is integrated means that it filters all traffic of Howden Group Holdings, i.e., communication between the Application and the User's browser or device, while also allowing analytical data on Howden Group Holdings to be collected.

Personal Data processed:
  • browsing history
  • device information
  • device logs
  • number of sessions
  • session duration
  • session statistics
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • NRBA_SESSION: duration of the session
  • NRREFL: 3 months
  • NRREFP: 2 months
  • _newrelic_ui_session: 1 day
  • login_service_login_newrelic_com_tokens: 21 years
  • nr_secure: 1 day
  • nr_zd_logged_in: 1 day

Functionality

Howden Group Holdings uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.

Trackers managed by third parties

Vimeo, LLC

Vimeo video

Company: Vimeo, LLC

Place of processing: United States

Personal Data processed: Trackers +1

Vimeo is a video content visualisation service provided by Vimeo, LLC that allows Howden Group Holdings to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • player: 1 year
  • sync_active: duration of the session
  • vuid: 2 years
Google LLC

YouTube video widget

Company: Google LLC +1

Place of processing: United States +1

Personal Data processed: Trackers +1

YouTube is a video content visualisation service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows Howden Group Holdings to incorporate content of this kind on its pages.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • PREF: 8 months
  • VISITOR_INFO1_LIVE: 8 months
  • VISITOR_PRIVACY_METADATA: 7 months
  • YSC: duration of the session
  • YtIdbMeta:databases: duration of the session
  • iU5q-!O9@$: indefinite
  • yt-player-headers-readable: duration of the session
  • yt-remote-cast-available: indefinite
  • yt-remote-cast-installed: indefinite
  • yt-remote-connected-devices: duration of the session
  • yt-remote-device-id: duration of the session
  • yt-remote-fast-check-period: indefinite
  • yt-remote-session-app: indefinite
  • yt-remote-session-name: indefinite
  • ytidb::LAST_RESULT_ENTRY_KEY: duration of the session

Measurement

Howden Group Holdings uses Trackers to measure traffic and analyze User behavior to improve the Service.

Trackers managed by third parties

Google Ireland Limited

Google Analytics 4

Company: Google Ireland Limited

Place of processing: Ireland

Personal Data processed: number of Users +3

Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of Howden Group Holdings, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • number of Users
  • session statistics
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • _ga: 2 years
  • _ga_*: 2 years
Google LLC

Google Analytics Advertising Reporting Features

Company: Google LLC +1

Place of processing: United States +1

Personal Data processed: Trackers +2

Google Analytics on Howden Group Holdings has Advertising Reporting Features activated, which collects additional information from the DoubleClick cookie (web activity) and from device advertising IDs (app activity). It allows the Owner to analyse specific behaviour and interests Data (traffic Data and Users' ads interaction Data) and, if enabled, demographic Data (information about the age and gender).

Users can opt out of Google's use of cookies by visiting Google's Ads Settings.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • unique device identifiers for advertising (Google Advertiser ID or IDFA, for example)
  • various types of Data as specified in the privacy policy of the service
Service provided by:
Trackers duration:
  • IDE: 2 years
  • _gcl_*: 3 months
  • test_cookie: 15 minutes
FullStory, Inc.

FullStory

Company: FullStory, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

FullStory is an analytics and heat mapping service provided by FullStory, Inc. FullStory maps how frequently Users interact with the different areas of Howden Group Holdings, allowing the Owner to draw conclusions about their interests and preferences. FullStory further allows for the recording of mapping sessions making them available for later visual playback.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Optimizely, Inc.

Optimizely

Company: Optimizely, Inc.

Place of processing: United States

Personal Data processed: Trackers +1

Optimizely is an A/B testing service provided by Optimizely, Inc.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:

Marketing

Howden Group Holdings uses Trackers to deliver personalised ads or marketing content, and to measure their performance.

Trackers managed by third parties

LinkedIn Ireland Unlimited Company

LinkedIn Ads

Company: LinkedIn Ireland Unlimited Company +1

Place of processing: Ireland +1

Personal Data processed: Trackers +1

LinkedIn Ads is an advertising service provided by LinkedIn Ireland Unlimited Company or by LinkedIn Corporation, depending on how the Owner manages the Data processing.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • GAID: indefinite
  • IDFA: indefinite
  • UserMatchHistory: 1 month
  • _gcl_*: 3 months
  • _guid: 3 months
  • aam_uuid: 1 month
  • li_fat_id: 1 month
  • li_giant: 7 days
  • li_sugr: 3 months
  • lms_ads: 1 month
  • oribi_cookie_test: duration of the session
  • oribi_session: 2 hours
  • oribi_user_guid: 7 months
Meta Platforms, Inc.

Meta ads conversion tracking (Meta pixel)

Company: Meta Platforms, Inc. +1

Place of processing: United States +1

Personal Data processed: Trackers +1

Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Meta Audience Network with actions performed on Howden Group Holdings. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • Meta Pixel: 180 days
LinkedIn Corporation

LinkedIn conversion tracking (LinkedIn Insight Tag)

Company: LinkedIn Corporation

Place of processing: United States

Personal Data processed: device information +2

LinkedIn conversion tracking (LinkedIn Insight Tag) is an analytics and behavioural targeting service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on Howden Group Holdings. The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and enables to target groups of Users on the base of their past use of Howden Group Holdings.

Users may opt out of behavioural targeting features through their device settings, their LinkedIn account settings or by visiting the AdChoices opt-out page.

Personal Data processed:
  • device information
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • AnalyticsSyncHistory: 1 month
  • JSESSIONID: duration of the session
  • UserMatchHistory: 1 month
  • bcookie: 1 year
  • bscookie: 1 year
  • lang: duration of the session
  • li_gc: 7 months
  • lidc: 1 day
  • lms_ads: 1 month
  • lms_analytics: 1 month
  • sdui_ver: 1 day
Google LLC

Google Ad Manager

Company: Google LLC +1

Place of processing: United States +1

Personal Data processed: Trackers +1

Google Ad Manager is an advertising service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows the Owner to run advertising campaigns in conjunction with external advertising networks that the Owner, unless otherwise specified in this document, has no direct relationship with. This service uses the “DoubleClick” Cookie, which tracks use of Howden Group Holdings and User behaviour concerning ads, products and services offered.  

Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings.

In order to understand Google's use of Data, consult their partner policy and their Business Data page.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • Conversion: 3 months
  • DSID: 14 days
  • FCNEC: 1 year
  • FLC: 10 seconds
  • FPAU: 3 months
  • FPGCLAW: 3 months
  • FPGCLDC: 3 months
  • FPGCLGB: 3 months
  • GCL_AW_P: 3 months
  • GED_PLAYLIST_ACTIVITY: duration of the session
  • IDE: 2 years
  • NID: 6 months
  • RUL: 1 year
  • __gads: 2 years
  • __gpi: 2 years
  • __gpi_optout: 2 years
  • __gsas: 2 years
  • _gac_<wpid>: 3 months
  • _gac_gb_<wpid>: 3 months
  • _gcl_ag: 3 months
  • _gcl_au: 3 months
  • _gcl_aw: 3 months
  • _gcl_dc: 3 months
  • _gcl_gb: 3 months
  • _gcl_gf: 3 months
  • _gcl_gs: 3 months
  • _gcl_ha: 3 months
  • ar_debug: 3 months
  • id: 2 years
  • receive-cookie-deprecation: 6 months
  • test_cookie: 15 minutes
TikTok Inc.

TikTok conversion tracking

Company: TikTok Inc.

Place of processing: United States

Personal Data processed: Trackers +1

TikTok conversion tracking is an analytics and behavioural targeting service provided by TikTok Inc. that connects data from the TikTok advertising network with actions performed on Howden Group Holdings. The TikTok pixel tracks conversions that can be attributed to TikTok ads and enables to target groups of Users on the base of their past use of Howden Group Holdings.

Personal Data processed:
  • Trackers
  • Usage Data
Service provided by:
Trackers duration:
  • _tt_enable_cookie: 2 years
  • _ttp: 2 years
  • tt_appInfo: indefinite
  • tt_pixel_session_index: indefinite
  • tt_sessionId: indefinite

How to manage preferences on Howden Group Holdings

Users can set or update their preferences via the relevant privacy choices panel available on Howden Group Holdings.

With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.

How to control or delete Cookies and similar technologies via your device settings

Users may use their own browser settings to:

  • See what Cookies or other similar technologies have been set on the device;
  • Block Cookies or similar technologies;
  • Clear Cookies or similar technologies from the browser.

The browser settings, however, do not allow granular control of consent by category.

Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).

How to opt out of interest-based advertising

Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.

Consequences of denying consent

Users are free to decide whether or not to grant consent. However, please note that Trackers help Howden Group Holdings to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, in the absence of the User's consent, the Owner may be unable to provide related features.