Cookie Policy (SOC-2 Informed)

For Review by Legal Counsel – Not Final
Last Updated: [Insert Date]
Effective Date: [Insert Date]

1. Introduction

This Cookie Policy explains how [Company Name] ("Company," "we") uses cookies and similar technologies on our websites, applications, and online payment platform ("Services").

2. What Are Cookies?

Cookies are small text files stored on your device to support functionality, enhance security, and improve user experience.

We use:

  • Essential Cookies – required for login, security, and payments
  • Performance Cookies – collect usage and analytics data
  • Functional Cookies – remember preferences
  • Security Cookies – detect fraud and unauthorized access

3. How We Use Cookies

Cookies help us:

  • Authenticate users
  • Prevent fraud
  • Maintain secure sessions
  • Improve service performance
  • Understand user activity
  • Customize user experience

All cookie usage aligns with SOC-2 Security and Processing Integrity principles.

4. Third-Party Cookies

Third-party providers may set cookies for:

  • Payment verification
  • Analytics (e.g., Google Analytics)
  • Load balancing and content delivery networks

These parties are contractually obligated to follow strict privacy and security requirements.

5. Managing Cookies

Users can:

  • Adjust browser settings to block or delete cookies
  • Opt out of certain tracking (where required by law)

Blocking essential cookies may prevent use of key platform features.

6. Data Collected via Cookies

Depending on cookie type, collected data may include:

  • Device identifiers
  • IP addresses
  • Session tokens
  • Usage activity
  • Fraud detection signals

We do not use cookies to collect sensitive personal data without consent.

7. Retention

Cookies are retained for periods consistent with:

  • Security needs
  • Operational requirements
  • Applicable legal rules

Session cookies expire upon logout or browser close; persistent cookies remain until expiration or deletion.

8. Updates to This Policy

We may update this Cookie Policy periodically. Changes take effect upon publication.

9. Contact

Questions can be directed to:
[Company Contact Email]
[Company Address]