Cookie Policy

Effective date: 30.10.2025

Controller: USPIO LTD, 117 Makariou III Ave & Sisyfou, 5th floor, Limassol 3021, Cyprus

1. What this Policy covers

This Policy explains how cookies and similar technologies are used on https://uspio.ltd (the “Website”) and how you can control them. It complements our Privacy Policy.

2. What are cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, remember your choices, improve performance and measure audience reach. Similar technologies (e.g., local storage, pixels, tags) are treated like cookies in this Policy.

3. Who sets cookies?

First-party cookies are set by USPIO’s Website (same domain).
Third-party cookies are set by other providers we use (see the cookie table).

4. Your choices (consent)

Except for strictly necessary cookies, we use cookies only with your prior consent. On your first visit the banner will appear and non-essential cookies will be blocked until you choose Accept, Reject or Settings. You can change your choice at any time via the “Cookie settings” link in the banner or site footer.

We store a consent record (date/time, categories chosen) to demonstrate compliance. Withdrawing consent does not affect past lawful processing.

5. Categories we use

Strictly necessary (essential): Required for core site functions (e.g., remembering your cookie choices). Legal basis: legitimate interests (GDPR Art. 6(1)(f)); e-Privacy allows these without consent.
Analytics (audience measurement): Help us understand how visitors use the site, so we can improve it. Legal basis: consent (GDPR Art. 6(1)(a); e-Privacy Art. 5(3)).

We do not place advertising/marketing cookies or social-tracking pixels on the Website. If this changes, we will update this Policy and ask for consent.

6. Cookie list

We aim to keep this list accurate. Exact names can vary by browser and implementation; function and lifespan are as configured.

Name	Provider	Category	Purpose	Duration	Legal basis	More info / opt-out
CookieScriptConsent	USPIO (via CookieScript)	Strictly necessary	Remembers your cookie choices and prevents the banner from re-appearing on every page.	4 weeks 2 days	Legitimate interests	Provided by CookieScript (Objectis Ltd., EU)
_ga	Google Analytics (first-party)	Analytics	Distinguishes visitors (pseudonymous ID) to measure usage; configured to respect consent and IP-anonymization.	up to 13 months	Consent	Google Analytics Opt-out Add-on; GA privacy documentation: Google Analytics Opt-out Add-on: https://tools.google.com/dlpage /gaoptout Google Analytics privacy & safeguards: https://support.google.com/anal ytics/answer/6004245 Google partner sites policy: https://policies.google.com/tech nologies/partner-sites IP anonymisation in GA: https://support.google.com/anal ytics/answer/2763052
_ga_*	Google Analytics (first-party)	Analytics	Stores session-state data for GA; configured as above.	up to 13 months	Consent	Same as above
_gid (if present)	Google Analytics (first-party)	Analytics	Short-lived ID to track page views.	24 hours	Consent	Same as above

Notes

We configure cookie lifetimes for analytics to no more than 13 months and enable IP anonymisation.
If Google introduces minor name variations (e.g., _ga_<container-id>), they serve the same functions and durations.

7. Managing your preferences

Banner/centre: Click “Cookie settings” in the banner or site footer to review/change your choices at any time.
Browser controls: You can block or delete cookies via your browser. If you do, some site features may not work as intended.
Third-party tools: You may also use Google’s browser add-on to opt out of Google Analytics.

8. Data retention & consent logs

Consent records (CookieScript): We keep consent records for 6 months (or until you withdraw consent), after which they are deleted or anonymised. On request, we can export consent logs for audit purposes.
Analytics events (server-side in Google Analytics): we set the GA data-retention control to 14 months. This is separate from browser cookie lifetimes.

9. Third-party providers & international transfers

CookieScript is provided by Objectis Ltd. (Lithuania, EU) and stores only your consent preference.
Google Analytics is provided by Google Ireland Limited (EU). Some processing may involve transfers outside the EEA, in which case Google applies EU Standard Contractual Clauses (2021). Where transfers to the USA occur (for example, limited processing by Google LLC in support of Google Analytics), we rely on Google LLC’s EU-U.S. Data Privacy Framework (DPF) certification. Where the DPF is not available or does not apply, we use the 2021 EU Standard Contractual Clauses (SCCs) together with technical and organisational measures (including IP anonymisation).

10. Updates to this Policy

We may update this Policy from time to time (for example, if we add or remove a cookie). When we make material changes, we will show the banner again or otherwise notify you. The “Effective date” above shows the latest update.

11. Contact

Questions about this Policy or your choices? Email privacy@uspio.ltd.