02
What we set
We use cookies in three categories. Strictly necessary cookies are always set because the site cannot work without them. Analytics is opt-in. Marketing cookies are not set by us at all.
- Strictly necessary: session ID, CSRF token, cookie-consent state. Set by us. Expire when you close the browser or after 30 days.
- Analytics: a single privacy-respecting analytics cookie (Plausible or equivalent). Counts visits, page views, and referrers in aggregate. No fingerprinting, no cross-site tracking. Opt-in via the consent banner.
- Marketing: none. We do not use Meta Pixel, Google Ads, TikTok, or LinkedIn tracking.
03
Third-party services
When you book through the LobbyPMS engine, pay through Stripe, or fill in a form powered by HubSpot, those services may set their own cookies on their own domains. Their privacy policies govern those cookies. LobbyPMS is at lobbypms.com/privacy. Stripe is at stripe.com/privacy. HubSpot is at hubspot.com/data-privacy/privacy-policy.
05
Do not track
We honour the Global Privacy Control header. If your browser sends a "do not track" or GPC signal, we treat it as a refusal of analytics cookies.
06
Updates
When we add or remove a cookie, we update this list. The "last updated" date at the top tells you when the list was last reviewed.
07
Contact
Questions about cookies, consent, or how to opt out: hola@vivus.group.