Last updated: 18 September 2026
What a cookie is
A cookie is a small file a website stores on your device so it can remember something about your visit. Some are needed for the site to work. Others help us understand how the site is used, or let us measure the response to our advertising. Similar technologies — pixels, tags and browser storage — are covered by this policy too.
This policy covers two separate systems: this website (www.cxsymposium.com) and our registration and participation platform (portal.cxsymposium.com). They set different cookies and are described separately below.
Your choice
On both this website and the registration platform we ask which cookies you are happy for us to use. Only the strictly necessary cookies are set before you choose — nothing in the analytics or advertising sections is set until you agree to it.
You can change your mind at any time: change your cookie settings, or clear this site’s data in your browser and we will ask again. Each section below also lists the provider’s own opt-out where one exists.
Cookies on this website (www.cxsymposium.com)
Strictly necessary — always on
| Cookie | What it does | How long it lasts |
|---|---|---|
PHPSESSID |
Identifies your browsing session so pages behave consistently as you move around the site. | Until you close your browser. |
woocommerce_cart_hash, woocommerce_items_in_cart |
Remembers what is in your registration basket. | Until you close your browser. |
wp_woocommerce_session_* |
Links your basket to your registration as you check out. | 2 days. |
wordpress_logged_in_*, wp-settings-* |
If you have an account on this site: keeps you signed in and remembers your display preferences. | Session to 1 year. |
ucString |
Remembers the choice you made in the cookie banner so you are not asked again, and shares that one choice between this website and our registration platform at portal.cxsymposium.com (both are on cxsymposium.com). It holds your choice only — no identifier and nothing about you. | 12 months. |
bx_in |
Set by our registration platform (portal.cxsymposium.com) while you are signed in there, so that this website’s My Account button can show that you are signed in. It holds only the platform’s address — no identifier and nothing about you — and is removed when you sign out. | Up to 30 days, or until you sign out. |
Analytics
| Cookie | Set by | What it does | How long it lasts |
|---|---|---|---|
_ga, _ga_* |
Google Analytics 4 | Distinguishes visitors and sessions. This site reports to two Google Analytics properties: one for the site, and one covering BIBA Medical’s websites as a group. | 2 years. |
_gid |
Google Analytics | Distinguishes visitors. | 24 hours. |
_gat |
Google Analytics | Limits how often data is sent to Google. | 1 minute. |
sbjs_first, sbjs_current, sbjs_session, sbjs_udata, sbjs_migrations and the matching _add cookies |
WooCommerce | Records how you first arrived at the site and how you arrived this time, so we know which channels bring registrations. Attached to your order so we can attribute it. | 6 months. |
You can opt out of Google Analytics on every website using the Google Analytics opt-out browser add-on.
Advertising and audience measurement
These let us measure the response to our advertising and reach relevant audiences on other platforms. They are set by third parties, who may combine what they collect here with data they already hold about you. Each company’s own notice explains what it does, and each offers its own controls.
| Cookie | Set by | What it does | How long it lasts | Their controls |
|---|---|---|---|---|
_fbp, and fr on facebook.com |
Meta (Facebook and Instagram) | Measures and targets our Facebook and Instagram campaigns. | 3 months. | Meta ad preferences |
_twpid, _twsid |
X (formerly Twitter) | Measures and targets our X campaigns. | Up to 2 years. | X ad preferences |
li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory, ln_or |
LinkedIn Insight Tag | Measures and targets our LinkedIn campaigns. | Up to 12 months. | LinkedIn ad settings |
_gcl_au |
Google Ads | Attributes registrations and enquiries to our Google advertising. | 3 months. | Google Ad Centre |
Content from other companies
- Vimeo — on pages with an embedded video, Vimeo may set its own cookies when you play it.
- Google reCAPTCHA — our contact and registration forms use reCAPTCHA to prevent automated abuse, which sets cookies on Google’s domains.
- Google Tag Manager — sets no cookie of its own; we use it to load some of the tags above.
Cookies on the CX registration and participation platform (portal.cxsymposium.com)
Our registration and participation platform runs at portal.cxsymposium.com, operated by BIBA Medical Ltd. Apart from the cookie-choice cookie listed below, which it shares with www.cxsymposium.com, none of its cookies are shared with any other website, and none carry your name or email address — they hold only random identifiers the platform uses to recognise your browser.
Strictly necessary — always on
| Cookie | What it does | How long it lasts |
|---|---|---|
__Secure-authjs.session-token |
Keeps you securely signed in to your account. | Up to 30 days, or until you sign out. |
__Host-authjs.csrf-token |
A security token protecting the forms you submit from forgery. | Until you close your browser. |
__Secure-authjs.callback-url |
Remembers the page to return you to after signing in. | Until you close your browser. |
mfa_pending, bm_td |
Two-step sign-in for staff accounts: links an emailed six-digit code to your browser, and remembers a device you chose to trust. | 10 minutes / 30 days. |
account_setup, subscribe_setup, subscribe_verified, email_change |
When you subscribe, create an account or change your sign-in email, these tie the emailed code, and the fact you proved the address, to your browser while you finish the form. | 15–20 minutes. |
checkin-token |
Only for temporary check-in staff opening the platform from a short link at the event. | 7 days. |
vl-access |
Remembers that you entered the password for a password-protected video library. The password itself is never stored. | 30 days. |
impersonate-user-id, impersonate-return-url, impersonate-client-id |
Used only by BIBA Medical administrators viewing the platform as another user to help with a support query. Every use is logged. | 4 hours. |
ucString |
Remembers the choice you made in the cookie banner so you are not asked again, and shares that one choice between the platform and www.cxsymposium.com (both are on cxsymposium.com). It holds your choice only — no identifier and nothing about you. | 12 months. |
bx_in |
Remembers that you are signed in on the platform so that www.cxsymposium.com (which shares the cxsymposium.com domain) can show it on its My Account button. It holds only the platform’s address — no identifier and nothing about you — and is removed when you sign out. | Up to 30 days, or until you sign out. |
Settings stored in your browser, not cookies
The platform also keeps a few preferences in your browser’s own storage, which is never sent to us: your cookie choice (kept for 12 months, then asked again), your light or dark theme, a cached copy of the event branding so pages paint in the right colours, and small conveniences such as which event hub you last opened. None of these identify you.
Analytics — only if you choose “Accept All”
Choosing “Essential Only” means none of these are set.
| Cookie | Set by | What it does | How long it lasts |
|---|---|---|---|
_ga, _ga_* |
Google Analytics 4 | Helps us understand how the platform is used so we can improve it. Aggregated; not used to identify you. | 2 years. |
| Tags loaded through Google Tag Manager | Tag Manager sets no cookie itself; we use it to load analytics and advertising measurement tags. | As per each tag. |
You can change your choice at any time: clear this site’s data in your browser and you will be asked again. If you block the strictly necessary cookies you will not be able to sign in.
Content from other companies on the platform
- Vimeo — loaded with “do not track” on, which suppresses its analytics cookies; the player may still set a functional cookie for your playback settings.
- YouTube — we use the privacy-enhanced player, which sets no cookies until you press play; once playing, YouTube may set
VISITOR_INFO1_LIVE,YSCandCONSENTon youtube.com. - sli.do — live questions and polls in the attendee hub; sets its own session cookies on sli.do.
- Google Maps — address suggestions on the registration form; Google may set cookies when the suggestion service loads.
- Opayo by Elavon — card payments happen on Opayo’s own secure page. Any cookies it sets are on Opayo’s domain, under Opayo’s policy. We never see your card details.
Newsletter subscriptions and your preferences
Our newsletter subscription and preference pages run on the same platform at mypreferences.bibamedical.com. They use only the strictly necessary cookies listed above. No analytics or advertising cookies are set there, so no cookie banner is shown. Links to your preferences in our emails carry a personal key in the address (?k=…) so the page can show your details without signing in; that key lives in the link, not in a cookie, and you can ask us to reset it at any time.
Controlling cookies in your browser
Every major browser lets you block or delete cookies, and blocking third-party cookies will stop most of the analytics and advertising cookies described above. The relevant instructions are here: Chrome, Firefox, Safari and Edge.
Blocking strictly necessary cookies will stop parts of the site working, including registration.
Questions
If you have a question about this policy, or want to know what information we hold about you, write to BIBA Medical Ltd, 526 Fulham Road, Fulham, London SW6 5NR, or email info@bibamedical.com.