1. Scope
This policy explains how Stratavor uses cookies and similar technologies on our website and any Stratavor-branded web applications that link to it. It is written to align with UK PECR / ePrivacy and UK/EU GDPR requirements.
2. Why We Use Cookies
We use cookies to:
- provide core site functionality and security,
- remember your settings (including cookie preferences),
- understand site usage and improve performance, and
- (with consent) support marketing attribution and campaign effectiveness.
Our site runs on HubSpot with HubSpot’s standard cookie settings. HubSpot acts as a sub-processor for the cookies it sets; see our Sub-processor Register for details.
3. Legal Basis
- Strictly necessary cookies: set without consent based on legitimate interests and/or performance of a contract.
- All other cookies: set only after consent via our banner or settings panel. Consent may be withdrawn at any time (see Section 7).
4. Consent Management (Banner)
On first visit, we present a HubSpot consent banner with options to Accept all, Reject non-essential, or manage Cookie settings (granular).
We store a consent record containing your choices, banner version, timestamp, hashed IP, and user agent. Consent records are retained for 24 months unless you request deletion sooner.
5. Cookies We Set
The list below reflects HubSpot’s standard setup. Cookie names and durations may change as HubSpot evolves. We run a quarterly scan and update this page and our consent management configuration accordingly.
A. Strictly Necessary (Always Active)
- __hssc – HubSpot session management (30 minutes)
- __hssrc – Session continuity (session)
- __hs_cookie_cat_pref – Stores cookie category choices (6 months)
- __hs_opt_out – Records opt-out of non-essential cookies (6 months)
- hs_ab_test – A/B testing routing (session)
- Site session cookie (e.g., JSESSIONID) – Core session/security (session)
B. Preferences / Functionality (Consent)
- __hs_do_not_track – Prevents tracking when enabled (6 months)
- hs_langswitcher_choice – Stores language selection (2 years)
- hs-messages-hide-welcome-message – Chat welcome suppression (1 day)
- hs-messages-is-open – Chat open/closed state (30 minutes)
C. Analytics / Performance (Consent)
- __hstc – Main HubSpot visitor tracking (6 months)
- hubspotutk – Visitor identifier for analytics and forms (6 months)
D. Marketing / Attribution (Consent, If Enabled)
We do not store payment card numbers or sensitive authentication data in cookies. Where third-party pixels or ad tools are enabled, those providers may set their own cookies and control their own retention.
6. Third-Party Cookies and Embedded Content
Embedded third-party content (such as video or maps) or ad integrations may place cookies on your device. These are blocked by default and will only run after opt-in via Cookie settings.
7. How to Change or Withdraw Consent
Use the Cookie settings link in our footer at any time to review or change your choices, or select Reject non-essential to withdraw consent.
Clearing cookies in your browser will also remove stored preferences, including opt-outs.
To make a data request related to cookies (access or deletion), email privacy@stratavor.com.
8. Data Retention (Cookie-Related)
- Consent records: 24 months
- Aggregated analytics reports: up to 13 months
- Diagnostic or error logs: 180 days (with PII redaction thereafter)
9. Review Cadence
We perform a cookie and third-party script scan quarterly and after material front-end changes. Any new cookie requires product and privacy approval before deployment.
10. Changes to This Policy
This policy will be updated if our cookie usage or providers change. Material updates may trigger a renewed consent prompt where required.
11. Questions and Escalation
Questions may be sent to privacy@stratavor.com. If unresolved, you may contact your local supervisory authority such as the UK ICO or the Data Protection Commission (Ireland).
