Cookies Policy
1. About this Policy
VIPR Limited (“VIPR”, “we”, “us”) uses cookies and similar technologies on viprsolutions.com to make the site work, to understand how visitors use it, and to support our marketing. This Policy explains what cookies we use, why we use them, and how you can control them.
This Policy supplements VIPR’s Privacy Policy and should be read alongside it. It is published under the UK Privacy and Electronic Communications Regulations 2003 (“PECR”) and the UK General Data Protection Regulation (“UK GDPR”).
2. Who we are
VIPR Limited is a company registered in England and Wales (company number 06795644) with its registered office at Birchin Court, 20 Birchin Lane, London EC3V 9DU. VIPR is the data controller for personal data collected through cookies on viprsolutions.com.
Questions about this Policy or about how we use cookies can be sent to cio@viprsolutions.com.
3. What are cookies and similar technologies?
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, improve performance, remember preferences and report on how the site is used. This Policy uses the term “cookies” to cover cookies and similar technologies such as pixels, web beacons, local storage and software development kits (SDKs).
Cookies set by viprsolutions.com itself are “first-party” cookies. Cookies set by a third party (for example, analytics or marketing platforms we work with) are “third-party” cookies.
Cookies can be “session” cookies (deleted when you close your browser) or “persistent” cookies (which stay on your device for a defined period). Where this Policy refers to a retention period, it is the maximum lifetime of the cookie unless you delete it sooner.
4. The categories of cookies we use
VIPR groups cookies into four categories. Strictly necessary cookies are always on because the site cannot function without them. The other categories run only with your consent.
|
Category |
Purpose |
Consent required? |
|
Strictly necessary |
Required to deliver the site and the services you request -- for example, routing requests, security, load balancing and remembering session state. |
No (PECR exemption) |
|
Performance and analytics |
Help us understand how visitors use the site so we can improve it -- for example, which pages are visited, traffic sources, and aggregate engagement metrics. |
Yes |
|
Functional |
Remember choices you make (for example, region or language) and enable embedded content such as videos and chat. |
Yes |
|
Marketing and advertising |
Measure the performance of our marketing campaigns and help us deliver relevant content to professional audiences across other websites and platforms. |
Yes |
5. Cookies and trackers in use
The tables below list the cookies and similar technologies typically set on viprsolutions.com. The site is built on HubSpot and uses Google Tag Manager to load analytics and marketing tags. The inventory should be confirmed against a current cookie scan; placeholders are marked [TBC] where the value depends on configuration at the time of scanning.
5.1 Strictly necessary cookies
|
Cookie / tracker |
Provider |
Purpose |
Type |
Retention |
|
__cf_bm |
Cloudflare (HubSpot CDN) |
Distinguishes humans from bots; protects the site from abuse. |
First/third-party |
30 minutes |
|
__cfruid |
Cloudflare |
Used to route requests through Cloudflare's network. |
Third-party |
Session |
|
JSESSIONID |
HubSpot (CMS Hub) |
Maintains session state during a visit. |
First-party |
Session |
|
__hssrc |
HubSpot |
Indicates whether the visitor has restarted their browser. |
First-party |
Session |
5.2 Performance and analytics cookies
|
Cookie / tracker |
Provider |
Purpose |
Type |
Retention |
|
__hstc |
HubSpot |
Main HubSpot analytics cookie -- records first visit, last visit, current visit and visit count. |
First-party |
13 months |
|
hubspotutk |
HubSpot |
Identifies unique visitors and links activity to records in HubSpot CRM. |
First-party |
13 months |
|
__hssc |
HubSpot |
Tracks sessions, used to determine whether HubSpot should increment session count. |
First-party |
30 minutes |
|
_ga |
Google Analytics (via GTM container GTM-PXK57Q2) |
Distinguishes unique users. |
First-party |
2 years |
|
_ga_[container] |
Google Analytics 4 |
Persists session state for GA4 reporting. |
First-party |
2 years |
|
_gid |
Google Analytics |
Distinguishes unique users for 24 hours. |
First-party |
24 hours |
|
_gat / _gat_* |
Google Analytics |
Throttles request rate to Google Analytics. |
First-party |
1 minute |
5.3 Functional cookies
|
Cookie / tracker |
Provider |
Purpose |
Type |
Retention |
|
messagesUtk |
HubSpot Conversations / chat |
Recognises returning visitors to chat so conversations are not duplicated. Only set if chat is enabled on a page. |
First-party |
13 months |
|
hsLang / hs-messages-is-open |
HubSpot |
Stores language preference and the open/closed state of the HubSpot chat widget. |
First-party |
Session / 30 days |
|
[Video provider cookies] |
YouTube / Vimeo (if embedded) |
Enable embedded video playback and remember playback preferences. Only set when a video is played. |
Third-party |
Up to 8 months |
5.4 Marketing and advertising cookies
|
Cookie / tracker |
Provider |
Purpose |
Type |
Retention |
|
_gcl_au |
Google (Ads conversion linker) |
Stores and measures conversions linked to Google Ads. Set if Google Ads tags are configured in GTM. |
First-party |
90 days |
|
li_sugr, bcookie, lidc, AnalyticsSyncHistory, UserMatchHistory |
LinkedIn (Insight Tag) |
Measures the performance of LinkedIn campaigns and supports retargeting. Set if the LinkedIn Insight Tag is fired through GTM. |
Third-party |
Up to 2 years |
|
[Other marketing tags] |
[TBC -- confirm against current GTM container and HubSpot tracking settings] |
Campaign measurement and retargeting on professional audiences. |
Third-party |
[TBC] |
6. Legal basis
Under PECR, cookies that are not strictly necessary to provide the service you have requested can only be set with your consent. Where cookies process personal data (for example, online identifiers used for analytics or marketing), the UK GDPR also applies and consent is the lawful basis.
Strictly necessary cookies are set on the basis of the PECR exemption that allows cookies which are essential to deliver a service the user has explicitly requested. They are not used for analytics or marketing.
All other categories run only after you have given consent through the cookie banner. You can withdraw consent at any time with the same ease as you gave it.
7. How to control cookies
7.1 On viprsolutions.com
When you first visit the site you will see a cookie banner with options to Accept All, Reject All or manage your preferences by category. You can change your choices at any time by selecting “Cookie Preferences” in the footer of the site.
If the cookie banner is not visible -- for example, because consent has already been recorded -- you can clear your stored choice by clearing the cookies for viprsolutions.com in your browser and reloading the site.
7.2 Through your browser
All modern browsers let you block or delete cookies. Blocking strictly necessary cookies may stop parts of the site working. Browser help pages with instructions:
- Google Chrome
- Microsoft Edge
- Apple Safari
- Mozilla Firefox
- Google Analytics -- Google Analytics Opt-out Browser Add-on
- Google Ads personalisation -- Google Ads Settings
- LinkedIn Ads -- LinkedIn Ad Preferences
- Industry opt-out tools -- Your Online Choices (UK/EU)
7.3 Third-party opt-outs
You can opt out of measurement or advertising by some of the third parties we work with directly:
8. International transfers
Some of the providers listed above (for example, Google and LinkedIn) may process information outside the UK and European Economic Area. Where this happens, transfers are made using approved safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate supplementary measures such as encryption.
9. Your rights
Cookies that process personal data are subject to the UK GDPR. You have rights of access, rectification, erasure, restriction, objection and (where applicable) data portability in relation to that personal data. See our Privacy Policy for full details on how to exercise those rights.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk) about how we use cookies.
10. Changes to this Policy
VIPR reviews this Policy at least annually and whenever there is a material change to the cookies we use. The version and effective date at the top of the Policy show when it was last updated.
11. Contact
Chief Information Officer, VIPR Limited -- cio@viprsolutions.com
Birchin Court, 20 Birchin Lane, London EC3V 9DU, United Kingdom