Cookies Policy

Effective date: 24 September 2026
This Policy explains the use of cookies, local storage and similar technologies across the ResilePlans Service.

1. Overview

1.1. This Cookies Policy explains how MANAGEMENT RESILIENCE LTD ("ResilePlans", "we", "us", "our") uses cookies and similar technologies, including local storage, session storage, pixels and SDKs, on resileplans.co.uk and related applications (the "Service"). It complements our Privacy Policy.
1.2. Controller: MANAGEMENT RESILIENCE LTD, company number 15587224.
1.3. Address: 20 Wenlock Road, London, England, N1 7GU.
1.4. Contact: info@resileplans.co.uk.
1.5. The Service provides AI-generated business-planning tools, Token-based paid features and, where separately agreed, specialist work under Custom Projects. Cookies and similar technologies may be used to maintain secure sessions, support Token balances, remember preferences and preserve work-in-progress data.

2.1. Cookies are small text files stored on your device by a website. They can help identify a secure session, remember settings, protect against security threats and measure how the Service performs.
2.2. Local storage and session storage are browser technologies that can store information on your device. For example, the Service may use local storage to preserve draft text or interface preferences so that work is not unnecessarily lost.

3.1. Strictly Necessary / Essential: required for core operation, security, login, checkout, Account access and Token-related functionality. These technologies cannot normally be disabled through our consent controls where they are necessary to provide the Service.
3.2. Functional: used for optional functionality and personalisation, such as remembering currency or language preferences and supporting draft-saving features.
3.3. Performance / Analytics: used to understand how the Service is used, identify errors and improve performance. Where consent is required, these technologies are used only after consent.
3.4. Marketing / Attribution: used to measure advertising performance or identify the campaign that referred a user. These are used only where the required consent has been obtained.

4.1. The names and durations of technologies may change as the Service evolves. Illustrative examples include:
rp_session – secure login/session identifier – Necessary – session duration.
XSRF-TOKEN – protection against cross-site request forgery – Necessary – session duration.
rp_currency – remembers selected display currency (GBP, EUR or USD) – Functional – up to 12 months.
rp_draft_autosave (local storage) – preserves draft business-plan text locally – Functional – until cleared or replaced.
Payment-provider security cookies (for example, Stripe security/fraud-prevention identifiers where used) – Necessary – duration set by the relevant provider.
Analytics identifiers (for example, Google Analytics identifiers where enabled) – Analytics – duration set in the consent tool or by the provider.
Advertising attribution identifiers – Marketing – duration shown in the consent tool where used.
4.2. The Cookie Preferences / Settings interface, where available, provides the most current information about enabled non-essential technologies and third-party providers.

5.1. Essential technologies are used where necessary to provide, secure or operate the Service and do not depend on optional cookie consent.
5.2. Non-essential Functional, Analytics and Marketing technologies are used only where the applicable consent or other lawful condition has been satisfied. Where consent is the basis, you may withdraw or change it at any time through the available Cookie Preferences interface.

6.1. When you interact with our cookie banner or settings interface, we may record your consent choices, the date and time, a consent identifier and technical information needed to demonstrate or apply your preferences.
6.2. Consent records may be retained for up to 24 months, or another appropriate period, to demonstrate compliance and remember your choices, after which we may request your preferences again.

7.1. Third-party providers may set or read cookies or similar technologies where necessary to provide payment, analytics, security or other Service functionality.
7.2. Examples may include payment processors, analytics providers and infrastructure or AI service providers. The providers actually in use may change over time and are reflected, where applicable, in our Cookie Preferences interface and Privacy Policy.
7.3. Where information collected through these technologies is transferred outside the UK or EEA, we use the safeguards described in our Privacy Policy where required by applicable law.

8.1. Cookie Preferences: use the Cookie Preferences or similar link made available on the Service to change optional choices at any time.
8.2. Browser Controls: most browsers allow you to block, restrict or delete cookies and local storage. Browser-level blocking may also remove technologies needed for functionality.
8.3. If you disable Functional technologies or clear local storage, draft content or preferences stored only on your device may be lost or reset.

9.1. Where technically supported and legally applicable, we endeavour to respond appropriately to recognised browser privacy signals. Support may vary by browser, technology and the nature of the signal.

10.1. We may update this Cookies Policy to reflect changes in the Service, technologies, providers or applicable law. Material changes will be communicated through the Service or another reasonable method.
10.2. The effective date shown at the beginning of this Policy indicates the version intended for current use.