[User Story] Implement cookie notice to inform users

[chrisdburr]

Prior to public beta release, we will need to implement a cookie banner.

Here is guidance from our DPO:

**The rules around cookies are governed by the Privacy and Electronic Communications Regulations (PECR) and the ICO's guidance can be summarised as follows. A cookie banner should greet the site visitor on their first interaction with the site.

The ICO's guidance sets out the following approach:

Essential or ‘strictly necessary’ cookies – do not require consent (“cookies so that we can provide you with the best user experience possible”)

• Cookies used to remember goods in a shopping basket

• Cookies for security purposes (such as in online banking)

-‘Load balancing’ cookies to ensure pages load quickly

Non-essential cookies (“functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful”) – require consent (i.e., to tick a box before we set them)

• Analytics cookies

• Cookies to recognise you when you return

• First- and third-party advertising

Not PECR compliant

• ‘by continuing to browse our website you consent to the use of cookies’

• ‘we use cookies. find out more’

• pre-ticked ‘accept’ boxes

• 'we collect unless you opt-out' approaches

• Making it much more difficult to make an informed decision than simply pressing ‘ACCEPT’

PECR compliant

• Explains the essential cookies

• Allows opt-in to categories of non-essential cookies before browsing the website

• ‘REJECT’ or ‘DO NOT ACCEPT’ is as prominent as ‘ACCEPT’

The main Turing website notice covers this according to the guidance. **

[chrisdburr]

@cptanalatriste: please identify a list of cookies we use that fit into the above categories (e.g. just essential cookies) so that the banner can be created.