02
What we set
We use cookies in three categories. Strictly necessary cookies are always set because the site cannot work without them. Analytics is opt-in. Marketing cookies are not set by us at all.
- Strictly necessary: session ID, CSRF token, cookie-consent state. Set by us. Expire when you close the browser or after 30 days.
- Analytics: a single privacy-respecting analytics cookie (Plausible or equivalent). Counts visits, page views, and referrers in aggregate. No fingerprinting, no cross-site tracking. Only if analytics is switched on.
- Marketing: none. We do not use Meta Pixel, Google Ads, TikTok, or LinkedIn tracking.
03
Third-party services
When you book through SiteMinder, message us on WhatsApp, or open a Google Form, those services may set their own cookies on their own domains. Their privacy policies govern those cookies.
05
Do not track
We honour the Global Privacy Control header. If your browser sends a "do not track" or GPC signal, we treat it as a refusal of analytics cookies.
06
Updates
When we add or remove a cookie, we update this list. The "last updated" date at the top tells you when the list was last reviewed.
07
Contact
Questions about cookies, consent, or how to opt out: hello@vivus.group.