How we use analytics and cookies

Last updated 8 September 2026. This notice covers cellandgene.live, operated by Onyx Newsroom Ltd.

We use no advertising cookies, social-media pixels or cross-site tracking. Optional analytics, session recording and live-chat tools are blocked until you make a choice. Rejecting them does not stop you using the public site or buying a ticket.

What you can choose

Audience analytics without direct identifiers. If you agree, our self-hosted Umami service measures visits to public pages, referral source, approved UTM source, medium, campaign and message-variant labels, device/browser information, approximate country, site performance and named interactions such as a ticket-button click or checkout attempt. We remove unapproved URL fragments and every query parameter except validated UTM labels; an external referrer is reduced to its website origin. We do not send names, email addresses, order IDs, payment IDs or advertising identifiers. Umami derives a pseudonymous session hash from the request IP address, browser user agent and website ID; we disable its optional Distinct ID feature and prohibit attempts to identify a visitor from this data.

When a consented visitor completes payment, our verified Stripe webhook may send Umami an aggregate purchase event: ticket type, value, currency and validated campaign labels. It contains no customer, order, Stripe or replay identifier and has no technical join to a recording. At this event's small traffic volume, timing and campaign context could still support an inference, so staff are prohibited from trying to identify a buyer. Stripe and our order record remain the authoritative source for sales.

Session recordings and heatmaps within Recommended. If you choose Recommended, Umami can capture a recording of clicks, pointer movement and scrolling on public pages and combine those interactions into heatmaps. Contact forms and embedded frames are blocked. Admin, sign-in, portal, checkout success, ticket-pass and internal studio routes are never tracked or recorded. A recording is capped at five minutes and expires after 30 days.

Intercom live chat. Recommended also enables Intercom's messenger so you can ask our guest team a question and continue the conversation later. It uses cookies beginning intercom-id-, intercom-session- and intercom-device-id-, plus local-storage entries beginning intercom. and ably-. Its cookies typically last up to nine months. Intercom acts as our processor; where data is handled outside the UK, we use an applicable UK adequacy decision or approved transfer terms.

Turning Recommended off shuts down the messenger and removes its first-party cookies and browser-storage entries on this site as a best-effort cleanup. You can always contact us by email instead.

Privacy settings — review or withdraw Recommended features at any time. Accept all and Reject all are also available in one click.

Browser storage

• Your privacy choices are saved in local storage as onyx_consent_v3, with the time of your choice, so we do not ask again on every page.
• After analytics consent, validated first- and last-touch UTM labels are kept for this browser tab only in session storage as onyx_campaign_attribution_v1. They are removed if analytics is rejected and disappear when the tab session ends.
• Your currency preference is saved as the first-party onyx_currency cookie if you change currency. It lasts up to one year and is used only to provide the display you requested.
• Authentication cookies may be set by Supabase when you use a protected account or portal feature. They keep you signed in and are cleared when you sign out or they expire.

Payments take place on Stripe's hosted checkout. We do not see your card details. Stripe controls the cookies it sets on its own domain under Stripe's privacy policy.

Retention and access

Session recordings are configured to expire after 30 days. We set a 13-month maximum for ordinary analytics and will delete data that reaches it. Access is limited to people who need the data to improve this event website and ticket journey. Our infrastructure providers process the data for us; we do not sell it or use it to build advertising profiles.

Your rights and who to ask

Onyx Newsroom Ltd is the data controller — company number 15348780, registered office 63c Penkvale Road, Stafford, ST17 9HX, United Kingdom. To ask a question, withdraw consent or exercise a data protection right, email lewis@onyxnewsroom.com. We respond within one month.

You may also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

If we contacted you first and you want to know how we obtained and use your details, read our separate outreach privacy notice.

Changes to this notice

If we add a vendor or materially change an optional purpose, we will update this notice and ask you again before that tool loads.