PPHA-678: Footer - Cookies

features/static.feature

@@ -0,0 +1,16 @@
+@StaticContent
+Feature: Static Pages
+  Scenario: The static pages are available without logging in
+    When I go to "/cookies"
+    Then I see a page title "NHS check if you need a lung scan cookies policy"
+    When I go to "/privacy-policy"
+    Then I see a page title "NHS check if you need a lung scan privacy policy"
+
+  Scenario: The static pages are available when logged in and accessible
+    Given I am logged in
+    When I go to "/cookies"
+    Then there are no accessibility violations
+    And I see a page title "NHS check if you need a lung scan cookies policy"
+    When I go to "/privacy-policy"
+    Then there are no accessibility violations
+    And I see a page title "NHS check if you need a lung scan privacy policy"

lung_cancer_screening/core/jinja2/layout.jinja

@@ -56,6 +56,10 @@
   {{ footer({
     "meta": {
       "items": [
+        {
+          "href": url("questions:cookies"),
+          "text": "Cookies"
+        },
         {
           "href": url("questions:privacy_policy"),
           "text": "Privacy policy"

lung_cancer_screening/questions/jinja2/cookies.jinja

@@ -0,0 +1,111 @@
+{% extends 'layout.jinja' %}
+
+{% block content %}
+<div class="nhsuk-grid-row">
+  <div class="nhsuk-grid-column-two-thirds">
+    <h1 class="nhsuk-heading-l">NHS check if you need a lung scan cookies policy</h1>
+    <section>
+      <p>Version 1.0, 09 March 2026</p>
+    </section>
+    <div class="nhsuk-inset-text">
+      <span class="nhsuk-u-visually-hidden">Information: </span>
+      <p>First release of the service for pilot GP surgeries.</p>
+    </div>
+    <section>
+
+      <p>This cookies policy relates to the service provided by NHS England.</p>
+
+      <p>NHS England ("we" or "us") uses cookies to deliver the NHS check if you need a lung scan.</p>
+
+      <p>The information set out in this policy is provided in addition to the <a
+          href="{{ url('questions:privacy_policy') }}" target="_blank" rel="noopener">NHS check if you need a lung scan
+          privacy
+          policy</a> and should be read alongside it. </p>
+
+      <p>We put small files called cookies on your device (for example, your phone).</p>
+
+      <p>Cookies are widely used to make websites and apps work, or work more efficiently, as well as to provide
+        services and functionalities for users.</p>
+
+      <p>We only put cookies on your device that are required for the NHS check if you need a lung scan to work
+        ("strictly necessary cookies").</p>
+
+      <p>We ask you to accept our cookies policy when you accept the NHS check if you need a lung scan terms of use and
+        privacy policy. In doing so, you agree to let us put the strictly necessary cookies on your device.</p>
+
+      <p>The strictly necessary cookies we need to put on your device for the NHS check if you need a lung scan to work
+        are listed here.</p>
+    </section>
+
+    <section>
+      <div class="nhsuk-table-container">
+        <table role="table" class="nhsuk-table">
+          <caption class="nhsuk-table__caption">Essential cookies</caption>
+          <thead role="rowgroup" class="nhsuk-table__head">
+            <tr role="row">
+              <th role="columnheader" class="" scope="col">Name</th>
+              <th role="columnheader" class="" scope="col">Purpose</th>
+              <th role="columnheader" class="" scope="col">Expires</th>
+            </tr>
+          </thead>
+          <tbody class="nhsuk-table__body">
+            <tr role="row" class="nhsuk-table__row">
+              <td class="nhsuk-table__cell">
+                <p>auth</p>
+              </td>
+              <td class="nhsuk-table__cell">
+                <p>This cookie is set when you log in to the NHS check if you need a lung scan service.
+                  It makes temporary use of your personal information previously collected by us.
+                  It's used to ensure you're securely logged in and your information is secure and is deleted when your
+                  session ends. </p>
+              </td>
+              <td class="nhsuk-table__cell">
+                <p>The end of the session. When you close the app or browser window, sign out or your session expires.
+                </p>
+              </td>
+            </tr>
+          </tbody>
+        </table>
+      </div>
+    </section>
+    <section>
+      <h2 class="nhsuk-heading-m">Cookies set by Qualtrics </h2>
+      <p>The NHS check if you need a lung scan uses Qualtrics cookies for the purpose of capturing responses to feedback
+        surveys.</p>
+
+      <p>Details on how Qualtrics uses cookies can be found in the <a href="https://www.qualtrics.com/cookie-statement/"
+          target="_blank" rel="noopener">Qualtrics cookies policy</a>, which can be accessed from
+        within the feedback survey.</p>
+
+    </section>
+    <section>
+      <h2 class="nhsuk-heading-m">Your cookie choices</h2>
+      <p>The majority of devices and browsers will allow you to alter the settings used for cookies and disable and
+        enable them as you require.</p>
+
+      <p>You can select your cookie preferences so that you do not get any cookies (except strictly necessary cookies)
+        if you prefer not to receive them.</p>
+
+      <p>You can also delete the cookies already on your device, and you can set your browser or device to prevent them
+        being placed.</p>
+
+      <p>Please be aware that if you set your preferences to not allow cookies, it could limit the functionality of the
+        NHS check if you need a lung scan as it needs the strictly necessary cookies to function.</p>
+    </section>
+    <section>
+      <h2 class="nhsuk-heading-m">Changes to this cookies policy</h2>
+      <p>The NHS check if you need a lung scan <a href="/terms-of-use" target="_blank" rel="noopener">terms of
+          use</a>,
+        <a href="{{ url('questions:privacy_policy') }}" target="_blank" rel="noopener">privacy policy</a> and cookies
+        policy may change. If
+        you use the NHS check if you need a lung scan service again in the future you will be subject to the policies
+        which exist at that time.
+      </p>
+    </section>
+    <section>
+      <h2 class="nhsuk-heading-m">Version history</h2>
+      <p>Version 1, 09 March 2026 - first release of the service for pilot GP surgeries.</p>
+    </section>
+  </div>
+</div>
+{% endblock %}

lung_cancer_screening/questions/urls.py

@@ -81,4 +81,5 @@
     path('weight', WeightView.as_view(), name='weight'),
     path('confirmation', ConfirmationView.as_view(), name='confirmation'),
     path('privacy-policy', TemplateView.as_view(template_name='privacy_policy.jinja'), name='privacy_policy'),
+    path('cookies', TemplateView.as_view(template_name='cookies.jinja'), name='cookies'),
 ]