01Overview.
This policy explains how VYRA Data Inc. ("VYRA", "we", "us", "our") uses cookies and similar technologies on our websites, including vyradata.com and the client sites we host on a client.vyradata.com pattern. It sits alongside our Privacy Policy, which explains how we handle personal information more generally. Read them together.
The date this policy last changed is shown at the top of this page. We may update it as described in "Changes to this policy" below.
We keep this simple. No non-essential tracker runs before you agree to it. Rejecting is as easy as accepting. You can change your mind at any time.
03Our consent standard.
For any tracker that is not strictly necessary, we ask for your consent first. That consent is prior, free, specific, informed, and unambiguous. In plain terms:
- Prior: nothing non-essential runs until you have made a choice.
- Free: you can accept or reject without penalty, and rejecting is as easy as accepting.
- Specific: you consent by category, not to everything at once.
- Informed: this page tells you what each category loads and why.
- Unambiguous: consent comes from a clear action you take, not from scrolling, browsing, or accepting general terms.
You can withdraw consent as easily as you gave it, at any time, through the cookie preferences link on our sites. This standard follows the approach set by regulators such as France's CNIL, which many organisations treat as the benchmark for cookie consent in Europe.
04The categories we use.
We group cookies into three categories. You control the last two.
Necessary. Always on.
These trackers are required for the site to work, so they do not need your consent and you cannot switch them off through the banner. They include:
- Session and load-balancing trackers that route your requests and keep the site stable.
- Authentication and security trackers that keep you signed in and protect against fraud and cross-site request forgery.
- A tracker that records your cookie choice, so we can honour it and not ask you again on every page.
These match the kinds of trackers regulators treat as exempt from consent, because they are strictly necessary to deliver a service you asked for.
Analytics. Off until you allow them.
These trackers help us understand how our sites are used so we can improve them. When you allow this category, we load Google Analytics 4 with IP anonymisation turned on and a 14-month retention window for event data. We use it to see which pages are visited, how people move through the site, and where things break. We do not use it to identify you personally.
Marketing. Off until you allow them.
These trackers measure and improve the relevance of our advertising. When you allow this category, we load the Meta pixel and send matching events to Meta through the Conversions API for measurement and deduplication. If you submit a form, your email, phone number, and first name are hashed with SHA-256 on our server before they reach Meta. They are never sent in the clear, and they are never sent unless Marketing is on.
For visitors in the EEA and the UK, we send Google Consent Mode v2 signals so that Google and Meta tags respect your choice. Consent Mode v2 uses four signals: ad_storage, analytics_storage, ad_user_data, and ad_personalization. We set them to match the categories you allowed.
06Third-party trackers and international transfers.
The Analytics and Marketing categories load tools from Google and Meta, which are based in the United States. When those tools run with your consent, some data may be processed outside your home region. We rely on Standard Contractual Clauses for these transfers, and where we rely on the EU-US Data Privacy Framework we keep Standard Contractual Clauses as a fallback so your data stays protected. Our Privacy Policy explains our transfer approach in more detail.
08Google Consent Mode v2.
For visitors in the EEA and the UK, we run Google Consent Mode v2. This is a requirement Google places on advertisers using its products in those regions. In practice it means our Google and Meta tags read the signals described in the Marketing category above and adjust their behaviour to match what you allowed. If you reject Marketing, the tags run in a limited, consent-respecting mode rather than setting advertising identifiers.
09Global Privacy Control.
Some browsers and extensions can send a Global Privacy Control signal, which tells sites you want to opt out of the sale or sharing of your personal information. For visitors in United States states that recognise it, we treat a Global Privacy Control signal as a valid opt-out of sale or sharing, and apply it to the relevant advertising trackers. You do not need to do anything else for us to honour it.
10Do Not Track.
Some browsers can send a Do Not Track signal. There is no common standard for how sites should respond to it, so we do not treat Do Not Track as a legal opt-out. We do log it. If you want to limit trackers, use the cookie preferences link, or send a Global Privacy Control signal where your state recognises it.
11Quebec Law 25.
Quebec's Law 25 applies to sites that reach Quebec residents, and it requires explicit consent before non-essential trackers run. Our approach meets that standard: non-essential trackers stay off until you allow them, rejecting is as easy as accepting, and you can withdraw at any time. Quebec's regulator, the CAI, has enforced these rules, so we hold ourselves to them across our sites.
14Changes to this policy.
We may update this policy from time to time, for example when we add or remove a tracker. When we make a change, we update the last-updated date at the top of this page. If a change means we would collect through a new non-essential tracker, we ask for your consent before it runs, rather than treating your continued use as acceptance.
15Contact.
For privacy questions and to exercise your rights, email privacy@vyradata.com.
For general and legal questions, email contact@vyradata.com.
You can reach us at VYRA Data Inc., Halifax, Nova Scotia, Canada. For more on how we handle personal information, see our Privacy Policy.