Strict Data Minimisation by Default: Verta Global engineers its digital properties with privacy by design. We do not use cross-site advertising trackers, behavioural retargeting pixels, or third-party data broker cookies. Non-essential performance storage remains strictly disabled unless you explicitly select “Accept All”.
1. Purpose & Regulatory Framework
This Cookie Policy explains how Verta Global (“we”, “our”, or “us”) uses HTTP cookies, HTML5 local storage, and comparable client-side technologies on verta-global.com (the “Website”). This Policy is aligned with:
- Directive 2002/58/EC (the EU ePrivacy Directive) as amended by Directive 2009/136/EC;
- The United Kingdom Privacy and Electronic Communications Regulations 2003 (PECR);
- The EU GDPR and UK GDPR standards for valid, freely given, granular consent; and
- Transparency obligations under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).
2. What Are Cookies & Browser Storage Technologies?
- HTTP Cookies: Small text tokens set by a web server or edge security network (such as Cloudflare) in your browser to recognise session integrity, mitigate automated bot attacks, or remember state across requests.
- HTML5 Local Storage (
localStorage): Browser-native key-value storage kept locally on your device that does not automatically transmit headers on every network request, allowing lightweight storage of UI preferences such as your cookie consent decision. - First-Party vs. Third-Party: First-party storage is set directly by
verta-global.com; third-party technical cookies may be set by infrastructure security providers protecting the domain edge.
3. How Verta Global Uses Client-Side Technologies
We use cookies and browser storage exclusively to:
- Protect the Website and its inquiry endpoints against Distributed Denial-of-Service (DDoS) attacks, malicious bots, and automated form spam;
- Record and honour your granular privacy and cookie consent preferences; and
- Where you explicitly opt in, measure aggregated technical page performance so we can maintain fast, accessible engineering standards.
4. Categories of Cookies & Storage
4.1 Strictly Necessary / Essential Security Storage (Always Active)
These mechanisms are strictly necessary to provide the Website securely over HTTPS and to remember your privacy choices. Under Article 5(3) of the ePrivacy Directive and Regulation 6 of PECR, strictly necessary security and consent-recording mechanisms do not require prior opt-in, though we disclose them transparently below.
4.2 Functional & Preference Storage
Supports convenient user-requested interactions, such as retaining temporary form state during an inquiry session.
4.3 Analytical & Performance Measurement (Opt-In Only)
Disabled by default. Only activated if a visitor explicitly clicks “Accept All” in our Cookie Controls banner. Selecting “Essential Only” ensures zero optional analytics storage is enabled.
4.4 Targeting, Advertising & Social Tracking Cookies (None Used)
Verta Global deploys zero third-party advertising networks, social media tracking pixels, or cross-site profiling cookies on verta-global.com.
5. Detailed Cookie & Storage Inventory
| Name / Key | Provider | Mechanism | Purpose | Duration | Category |
|---|---|---|---|---|---|
verta_cookie_consent_v1 |
verta-global.com (First-Party) |
HTML5 localStorage |
Stores your selected consent level (essential or all) and ISO timestamp so the consent banner does not reappear unnecessarily on every page view. |
12 months (or until cleared) | Strictly Necessary |
__cf_bm |
Cloudflare Edge Security | HTTP Cookie (Secure, HttpOnly, SameSite=None) |
Distinguishes legitimate human enterprise visitors from automated bot traffic and protects verta-global.com against malicious scraping and Layer-7 DDoS abuse. |
30 minutes | Strictly Necessary (Security) |
_cfuvid |
Cloudflare Edge Security | HTTP Cookie (Secure, HttpOnly) |
Applies rate-limiting policies accurately when multiple legitimate corporate users share a single NAT IP address. | Session | Strictly Necessary (Security) |
6. Edge Network & Web Typography Delivery
- Cloudflare TLS & WAF Edge: Traffic to
verta-global.comis protected by Cloudflare’s global security network using TLS 1.2/1.3 encryption, which may set strictly necessary bot-management cookies listed above to safeguard origin availability. - Web Fonts (Google Fonts): Our pages load open-source typefaces (Plus Jakarta Sans, Inter, and JetBrains Mono) from
fonts.googleapis.com/fonts.gstatic.com. Google Fonts CSS/font asset requests do not set or send tracking cookies.
7. Managing, Modifying, or Withdrawing Your Consent
You have full control over your cookie preferences at any time:
Browser-Level Cookie & Storage Controls
You can also inspect, block, or delete cookies and localStorage directly through your web browser settings:
- Apple Safari (macOS / iOS): Settings → Privacy → Manage Website Data.
- Google Chrome: Settings → Privacy and security → Third-party cookies / Site settings → View permissions and data stored across sites.
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data.
Global Privacy Control (GPC) & Do Not Track: Because Verta Global disables non-essential tracking by default and never sells or shares personal data, visitors with browser-level Global Privacy Control (Sec-GPC: 1) or Do Not Track signals enabled automatically receive our strictest privacy-preserving configuration.
8. Updates & Contact Information
We update this Cookie Policy whenever our technical stack or applicable regulations change. For questions regarding our use of cookies or security technologies, please read our Privacy Policy or email [email protected].