Cookie Policy

How Mandate may use cookies, local storage and similar technologies across the public website and application.

1. About this policy

This Cookie Policy explains how Mandate may use cookies, local storage and similar technologies in connection with the Mandate public website, application and related services. Mandate is operated by ESNP PTY LTD (ABN 19 607 597 526, ACN 607 597 526), trading as Mandate HQ (Mandate, we, us or our).

This policy should be read together with the Mandate Privacy Policy, which explains how we collect, hold, use and disclose personal information. Where information collected through cookies or similar technologies is personal information, it is handled in accordance with that Privacy Policy and applicable law.

2. What cookies and similar technologies are

Cookies are small data files that a website or application may store on a browser or device. Similar technologies can include local storage, session storage and other browser or application storage used to remember information or support a service.

The exact technology used may vary depending on the part of Mandate being accessed and the browser, device, authentication service or integration involved.

3. How Mandate may use these technologies

The Mandate website and application may use cookies, local storage and similar technologies that are reasonably necessary for sign-in, security, preferences, performance and analytics.

Depending on the service configuration, these technologies may support:

• sign-in, authentication and secure session management;
• security controls, fraud or misuse detection and protection of account access;
• remembering preferences or application settings;
• maintaining appropriate organisation or application context during normal use;
• performance, reliability and diagnostic functions; and
• analytics where an analytics feature is enabled.

4. Strictly necessary technologies

Some cookies or storage may be necessary for Mandate to provide core functions such as sign-in, account security, session continuity and application operation. If these technologies are blocked or removed, parts of the website or application may not function as intended.

5. Preferences and application storage

Mandate may use browser or application storage to remember preferences, settings or information needed to provide a consistent authorised-user experience. These technologies are used only to the extent reasonably necessary for the relevant feature or service function.

6. Performance and analytics

Mandate may use performance or analytics technologies to understand reliability, diagnose issues and analyse product performance using information appropriate for that purpose.

Where optional analytics technologies are introduced in a way that requires additional notice or consent, we will update our notices and consent practices as required by applicable law.

7. Marketing technologies

If Mandate introduces optional marketing or advertising technologies, we will update our notices and consent practices where required. The existence of this policy does not mean that every category of optional technology is active on every Mandate page or service.

8. Third-party services and integrations

Mandate uses infrastructure, hosting, database, authentication, email, security, support and other suppliers to operate the service, and organisations may authorise integrations with third-party business systems. Some third-party services may use their own cookies or similar technologies when their services are used.

Third-party services are governed by their own terms and privacy practices. Mandate does not control a third party's independent use of cookies or similar technologies outside the Mandate service.

9. Your choices and controls

Browser and device settings may allow you to block or delete cookies and similar stored information. Blocking technologies that are necessary for sign-in, security or application operation may prevent some Mandate functions from working correctly.

Where optional analytics or marketing technologies require a separate consent choice, we will provide or update consent controls as required by applicable law.

10. Retention

The period for which a cookie or similar item is retained depends on its purpose. Some information may exist only for a session, while other information may remain for longer where reasonably necessary for security, preferences, performance or another permitted service purpose.

Where a third-party service controls the relevant technology, its retention practices may also apply.

11. Privacy, security and overseas processing

Information collected through cookies or similar technologies is handled under the Mandate Privacy Policy. Some technology providers may store or process information outside Australia. Based on Mandate's current service configuration and providers, personal information may be processed in Australia and the United States, and may also be processed in other countries where an authorised provider or its subprocessors operate.

We take reasonable technical and organisational steps designed to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

12. Changes to this policy

We may update this Cookie Policy to reflect changes to the Mandate service, the technologies we use or applicable law. We will update the Last updated date and, where a change is material, take reasonable steps to bring it to the attention of affected users or organisations.