Cookie Policy
1. Scope
This policy explains how Stratavor uses cookies and similar technologies on our website and any Stratavor-branded web applications that link to it. It is written to align with UK PECR / ePrivacy and UK/EU GDPR requirements.
2. Why We Use Cookies and Similar Technologies
On stratavor.com (this marketing site, hosted on Vercel) we use cookies and similar browser storage to: (with consent) measure site usage and improve performance via Google Analytics 4; (with consent) support marketing measurement and personalisation where those Google tags are enabled; remember your cookie choices. We use Google Consent Mode v2 so optional tags respect your choices.
HubSpot is used as a processor for CRM, marketing forms, meeting scheduling, and related workflows. Contact and demo data you submit may be processed in HubSpot under our agreements; this policy focuses on cookies and local storage on your device when you browse our website. See our Sub-processor Register for processors including HubSpot and Google.
3. Legal Basis
Strictly necessary storage: required to deliver the site and remember your consent preferences, based on legitimate interests and/or performance of a contract where applicable. Analytics and marketing storage: only after you opt in via our banner or Cookie settings (consent), which you may withdraw at any time (see Section 7).
4. Consent Management (Banner)
On first visit, we show a first-party cookie banner on stratavor.com with Accept all, Reject non-essential, and Cookie settings (granular toggles for Analytics and Marketing). Your choices are stored locally in the browser using localStorage under the key stratavor_consent_v1 (schema version, boolean flags for analytics and marketing, and an ISO timestamp). This preference store is not sent to our servers by the banner itself; Google tags read consent signals only as implemented via gtag Consent Mode. If you clear site data or use another browser, you may see the banner again.
5. Cookies and Storage We Use
A. Preference storage (strictly necessary for consent UX): localStorage key stratavor_consent_v1 — stores your consent choices until you change or clear them.
B. Google Analytics 4 (if Analytics is enabled in Cookie settings): Google may set cookies such as _ga and _ga_<container> for measurement; names and lifetimes follow Google's documentation. Until you consent, Consent Mode defaults keep analytics_storage denied; limited cookieless pings may still occur per Google's model.
C. Marketing / ads tags (if Marketing is enabled): ad_storage, ad_user_data, and ad_personalization signals are granted only when you opt in to Marketing; Google may set or read cookies consistent with those purposes.
D. HubSpot: We do not load HubSpot marketing tracking cookies on this Next.js site by default. If you follow links to HubSpot-hosted scheduling or assets, HubSpot's domains may apply their own cookies under their policies. Form submissions from our contact flow are sent server-side to HubSpot when configured.
6. Third-Party Cookies and Embedded Content
Embedded content (for example Power BI reports or third-party iframes) may use additional cookies governed by those providers. Use Cookie settings to limit optional tags we control on this domain; embedded third parties may have separate controls.
7. How to Change or Withdraw Consent
Use Cookie settings in the site footer at any time to review or change your choices, or choose Reject non-essential on the banner. You can also clear cookies and local data for stratavor.com in your browser. To make a data request related to personal data (access or deletion), email privacy@stratavor.com.
8. Data Retention (Cookie-Related)
Consent preferences: retained in your browser until you update or clear them. Diagnostic or error logs on our infrastructure: as described in our security and privacy materials. Aggregated analytics in Google Analytics: subject to GA4 data retention settings in our Google account (commonly up to 14 months for event data unless configured otherwise).
9. Review Cadence
We perform a cookie and third-party script scan quarterly and after material front-end changes. Any new cookie requires product and privacy approval before deployment.
10. Changes to This Policy
This policy will be updated if our cookie usage or providers change. Material updates may trigger a renewed consent prompt where required.
11. Questions and Escalation
Questions may be sent to privacy@stratavor.com. If unresolved, you may contact your local supervisory authority such as the UK ICO or the Data Protection Commission (Ireland).