Cookie Policy
Cookie Policy
Vora
Remote Operations Agency
Effective Date: March 2026
Last Reviewed: March 2026
Version: 1.0
1. Introduction
This Cookie Policy explains how Vora ("we", "us", "our") uses cookies and similar tracking technologies on our website at www.vora.co.za (the "Website").
We are committed to being transparent about how we collect and use data. This policy is designed to comply with:
- The UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR), as they apply to visitors from the United Kingdom;
- The Protection of Personal Information Act 4 of 2013 (POPIA), as it applies to visitors and data subjects within the Republic of South Africa; and
- Applicable privacy legislation in other jurisdictions from which our Website is accessed.
Please read this policy carefully. By continuing to use our Website after being presented with our cookie consent notice, you confirm that you have read and understood this policy. Where your consent is required by law, we will only place non-essential cookies after you have given that consent.
2. What Are Cookies?
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. Cookies are widely used to make websites work efficiently, to remember your preferences, and to provide information to website owners about how their site is being used.
Cookies may be:
- First-party cookies — set directly by Vora's Website; or
- Third-party cookies — set by a domain other than Vora's Website (for example, by Google or Meta), typically for analytics or advertising purposes.
Cookies may also be:
- Session cookies — temporary cookies that are erased when you close your browser; or
- Persistent cookies — cookies that remain on your device for a set period of time or until you delete them manually.
In addition to cookies, we may use similar technologies such as web beacons, pixels, and tracking tags. References to "cookies" in this policy include these similar technologies unless otherwise stated.
3. Who We Are
The data controller responsible for the use of cookies and associated personal data on this Website is:
| Business Name | Vora |
| Legal Form | Sole Proprietorship |
| Privacy Contact | Ezra Mtambeka |
| info@vora.co.za | |
| Physical Address | 27 Grand National Boulevard, Milnerton, Cape Town, 7441, South Africa |
| Website | www.vora.co.za |
If you have any questions about this Cookie Policy or about how we handle your personal data, please contact us at info@vora.co.za.
4. Categories of Cookies We Use
We use the following categories of cookies on our Website. Each category is described below, including the specific cookies within each category, the purpose they serve, and the legal basis on which we rely to use them.
4.1 Essential / Strictly Necessary Cookies
What they are:
Essential cookies are strictly necessary for our Website to function and for you to be able to use its features. Without these cookies, services you have asked for — such as navigating pages, submitting forms, and completing bookings — cannot be provided.
Do we need your consent?
No. Essential cookies do not require your consent under UK GDPR, PECR, or POPIA because they are strictly necessary to deliver the service you have requested. They are placed automatically when you access our Website.
Legal basis:
- UK GDPR / PECR: Legitimate interests and strictly necessary for service delivery (Regulation 6(4) PECR)
- POPIA: Section 11(1)(c) — processing necessary to carry out actions for the conclusion or performance of a contract
Cookies in this category:
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_shopify_session |
Shopify | Maintains your session state across pages on the Vora website (powered by Shopify). Required for the site to function correctly. | First-party | Session |
_shopify_y |
Shopify | Shopify analytics cookie used to track unique visitors. Required by the Shopify platform. | First-party | 1 year |
_secure-session-id |
Shopify | Secures user sessions and prevents session hijacking on the Shopify platform. | First-party | Session |
cart |
Shopify | Persists shopping cart data between sessions if applicable to current Shopify configuration. | First-party | 2 weeks |
secure_customer_sig |
Shopify | Used by Shopify to verify that a visitor is logged in and to authenticate secure areas of the site. | First-party | 20 years |
__cfruid |
Cloudflare | Used by Cloudflare (Shopify's CDN provider) to identify trusted web traffic and protect against malicious bots. Essential for site security. | Third-party | Session |
cal.com session cookies |
Cal.com | Session and functional cookies set by the Cal.com booking widget embedded on our Website. Required for the scheduling tool to load and function, enabling visitors to book consultations with Vora. | Third-party | Session / Persistent (up to 30 days) |
About Cal.com: Our Website embeds a booking widget provided by Cal.com, Inc., a scheduling platform. When you interact with the booking widget, Cal.com may set its own essential cookies to manage your session and booking data. Cal.com processes data on servers in the United States and European Union. Please refer to Cal.com's Privacy Policy at cal.com/privacy for further details.
4.2 Analytics / Performance Cookies
What they are:
Analytics cookies help us understand how visitors interact with our Website by collecting and reporting information anonymously. They allow us to improve our Website by measuring which pages are visited most, how long users spend on each page, where visitors come from, and whether any errors occur during navigation.
Do we need your consent?
Yes. Analytics cookies are not strictly necessary and require your consent before they are placed. We will only activate analytics cookies if you have opted in via our cookie consent notice.
Legal basis:
- UK GDPR / PECR: Consent (Article 6(1)(a) UK GDPR; Regulation 6(1) PECR)
- POPIA: Section 11(1)(a) — processing with the consent of the data subject
Cookies in this category:
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_ga |
Google Analytics (Google LLC) | Registers a unique ID used to generate statistical data on how you use our Website, including page visits and traffic sources. | First-party (set by Google) | 2 years |
_ga_<container-id> |
Google Analytics (Google LLC) | Used by Google Analytics 4 to persist session state and distinguish users across sessions. | First-party (set by Google) | 2 years |
_gid |
Google Analytics (Google LLC) | Registers a unique ID used to generate statistical data about your use of the Website. Expires after 24 hours. | First-party (set by Google) | 24 hours |
_gat |
Google Analytics (Google LLC) | Used to throttle request rates to Google Analytics, limiting the number of data collections on high-traffic sites. | First-party (set by Google) | 1 minute |
What Google Analytics collects:
We use Google Analytics, a web analytics service provided by Google LLC ("Google"), to analyse how visitors use our Website. Google Analytics collects information such as:
- Pages visited and the sequence in which they were viewed
- Time spent on each page
- Approximate geographic location (country/city level, derived from IP address)
- Traffic sources (e.g., search engine, direct, referral, social media)
- Device type, operating system, and browser used
- Page load speeds and technical performance metrics
Google Analytics processes this data on our behalf. IP anonymisation is enabled on our implementation, meaning that your IP address is truncated before being processed or stored by Google. We do not use Google Analytics to collect personally identifiable information, and we have not enabled any Google Signals or Google Ads data sharing features.
Data collected by Google Analytics may be transferred to and processed by Google on servers in the United States. Google participates in the EU-US Data Privacy Framework and has entered into Standard Contractual Clauses to provide appropriate safeguards for international data transfers.
For more information about how Google uses data, visit: google.com/policies/privacy/partners
To opt out of Google Analytics across all websites, install the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout
4.3 Marketing / Targeting Cookies
What they are:
Marketing cookies are used to track your activity across websites and to build a profile of your interests. This information is used to deliver advertising that is more relevant to you, to limit the number of times you see an advertisement, and to measure the effectiveness of our advertising campaigns. These cookies are set by our third-party advertising partners.
Do we need your consent?
Yes. Marketing and targeting cookies require your explicit consent before they are placed. We will only activate marketing cookies if you have opted in via our cookie consent notice.
Legal basis:
- UK GDPR / PECR: Consent (Article 6(1)(a) UK GDPR; Regulation 6(1) PECR)
- POPIA: Section 11(1)(a) — processing with the consent of the data subject
Cookies in this category:
4.3.1 Meta (Facebook) Pixel
We use the Meta Pixel (also known as the Facebook Pixel), a tracking tool provided by Meta Platforms, Inc. ("Meta"). The Meta Pixel is a snippet of JavaScript code embedded on our Website that collects data about visitors' actions and sends it to Meta.
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_fbp |
Meta Platforms, Inc. | Used by Meta to identify browsers for the purpose of delivering advertising and website analytics services. | First-party (set by Meta) | 3 months |
_fbc |
Meta Platforms, Inc. | Stores the click identifier when a visitor arrives at our Website via a Meta (Facebook/Instagram) advertisement. | First-party (set by Meta) | 3 months |
fr |
Meta Platforms, Inc. | Used by Meta to deliver, measure, and improve the relevance of advertisements across Meta platforms. | Third-party | 3 months |
What the Meta Pixel does:
The Meta Pixel enables us to:
- Track ad conversions — measure actions taken on our Website by users who clicked on our ads on Facebook or Instagram (e.g., viewing a service page, submitting an enquiry form, or booking a consultation);
- Build retargeting audiences — create Custom Audiences of Website visitors so that we can re-engage them with relevant advertisements on Meta platforms; and
- Optimise ad delivery — provide Meta's algorithm with conversion data to improve the performance of our advertising campaigns.
The data collected by the Meta Pixel may be transferred to and processed by Meta on servers in the United States, Ireland, and other countries where Meta operates infrastructure. Meta participates in the EU-US Data Privacy Framework.
For information about how Meta uses this data, visit: facebook.com/privacy/explanation
To manage your Meta ad preferences, visit: facebook.com/ads/preferences
4.3.2 LinkedIn Insights Tag
We use the LinkedIn Insights Tag, a tracking tool provided by LinkedIn Ireland Unlimited Company ("LinkedIn"). The LinkedIn Insights Tag is a lightweight JavaScript snippet embedded on our Website.
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
li_fat_id |
Used by LinkedIn for conversion tracking, retargeting, and analytics. | First-party (set by LinkedIn) | 30 days | |
bcookie |
Browser identifier cookie used by LinkedIn to identify users for advertising. | Third-party | 1 year | |
li_gc |
Stores consent preferences for LinkedIn cookies. | Third-party | 6 months | |
lidc |
Used by LinkedIn for data centre selection and routing. | Third-party | 24 hours | |
AnalyticsSyncHistory |
Used by LinkedIn to store information about the timing of synchronisation with the LinkedIn analytics service. | Third-party | 30 days | |
UserMatchHistory |
Used by LinkedIn for Matched Audiences retargeting features. | Third-party | 30 days |
What the LinkedIn Insights Tag does:
The LinkedIn Insights Tag enables us to:
- Track ad conversions — measure actions taken on our Website by LinkedIn members who clicked on our LinkedIn advertisements (e.g., service enquiries, consultation bookings, and page visits);
- Build retargeting audiences — create Matched Audiences of Website visitors for targeted advertising on LinkedIn; and
- Gain demographic insights — access aggregated, anonymised demographic reports about our Website visitors (e.g., job title, seniority, industry, and company size), which help us understand our audience and improve our content.
The data collected by the LinkedIn Insights Tag may be transferred to and processed by LinkedIn on servers in the United States and European Union. LinkedIn is a subsidiary of Microsoft Corporation and participates in the EU-US Data Privacy Framework.
For information about how LinkedIn uses this data, visit: linkedin.com/legal/privacy-policy
To opt out of LinkedIn's use of data for advertising, visit: linkedin.com/psettings/guest-controls/retargeting-opt-out
5. Summary Table of All Cookies
| Cookie | Category | Provider | Duration | Consent Required |
|---|---|---|---|---|
_shopify_session |
Essential | Shopify | Session | No |
_shopify_y |
Essential | Shopify | 1 year | No |
_secure-session-id |
Essential | Shopify | Session | No |
cart |
Essential | Shopify | 2 weeks | No |
secure_customer_sig |
Essential | Shopify | 20 years | No |
__cfruid |
Essential | Cloudflare | Session | No |
| Cal.com session cookies | Essential | Cal.com | Session / 30 days | No |
_ga |
Analytics | 2 years | Yes | |
_ga_<id> |
Analytics | 2 years | Yes | |
_gid |
Analytics | 24 hours | Yes | |
_gat |
Analytics | 1 minute | Yes | |
_fbp |
Marketing | Meta | 3 months | Yes |
_fbc |
Marketing | Meta | 3 months | Yes |
fr |
Marketing | Meta | 3 months | Yes |
li_fat_id |
Marketing | 30 days | Yes | |
bcookie |
Marketing | 1 year | Yes | |
li_gc |
Marketing | 6 months | Yes | |
lidc |
Marketing | 24 hours | Yes | |
AnalyticsSyncHistory |
Marketing | 30 days | Yes | |
UserMatchHistory |
Marketing | 30 days | Yes |
6. Your Cookie Choices and How to Manage Cookies
You have the right to choose whether to accept or decline non-essential cookies. We explain your options below.
6.1 Our Cookie Consent Banner
When you first visit our Website, you will be presented with a cookie consent notice that gives you the option to:
- Accept all cookies — including Essential, Analytics, and Marketing cookies;
- Reject non-essential cookies — allowing only Essential cookies; or
- Manage your preferences — selecting which categories of non-essential cookies you consent to.
You may change your cookie preferences at any time by clicking the "Cookie Preferences" link in the footer of our Website.
6.2 Managing Cookies in Your Browser
You can also control and delete cookies directly through your browser settings. The following guides explain how to manage cookies in the most widely used browsers:
- Google Chrome: chrome://settings/cookies
- Mozilla Firefox: about:preferences#privacy
- Apple Safari (macOS): Safari > Preferences > Privacy
- Apple Safari (iOS): Settings > Safari > Privacy & Security
- Microsoft Edge: edge://settings/privacy
- Opera: opera://settings/cookies
Please note: If you disable cookies in your browser settings, some parts of our Website — in particular, the Cal.com booking widget — may not function correctly, and your user experience may be affected.
6.3 Opt-Out Tools Provided by Third Parties
In addition to browser-level controls, you can use the following tools provided by our third-party partners to opt out of their tracking:
- Google Analytics: Google Analytics Opt-out Browser Add-on
- Google (general ad personalisation): Google Ad Settings
- Meta (Facebook/Instagram): Facebook Ad Preferences
- LinkedIn: LinkedIn Ads Opt-out
6.4 Industry-Wide Opt-Out Tools
You may also use industry-wide tools that allow you to opt out of interest-based advertising from multiple participating companies simultaneously:
- Your Online Choices (UK & EU): youronlinechoices.eu
- Digital Advertising Alliance (US): optout.aboutads.info
- Network Advertising Initiative (US): optout.networkadvertising.org
7. International Data Transfers
Some of the third-party providers whose cookies we use process personal data outside of South Africa and, for UK visitors, outside of the United Kingdom. Where such transfers occur, we rely on the following safeguards to ensure an adequate level of protection:
- South Africa to United States: EU-US Data Privacy Framework participation (by Google, Meta, LinkedIn); Standard Contractual Clauses (SCCs)
- South Africa to European Union: Adequacy assessment — the EU is recognised as providing comparable protection standards
- United Kingdom to United States: UK International Data Transfer Agreements (IDTAs) and UK Addendum to EU SCCs
- United Kingdom to South Africa: Standard Contractual Clauses / UK IDTAs as applicable
These safeguards are in place to comply with:
- Section 72 of POPIA — governing the transfer of personal information outside the Republic of South Africa
- Article 46 of the UK GDPR — governing international transfers from the UK
8. Your Rights as a Data Subject
Depending on your jurisdiction, you may have the following rights in relation to the personal data we collect through cookies:
8.1 Rights Under UK GDPR (UK Visitors)
- Right of access — to obtain a copy of the personal data we hold about you
- Right to rectification — to have inaccurate data corrected
- Right to erasure — to request deletion of your personal data ("right to be forgotten")
- Right to restrict processing — to request that we limit how we use your data
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — you may withdraw your consent to non-essential cookies at any time via our cookie preferences tool or by contacting us at info@vora.co.za
To exercise your rights under UK GDPR, contact:
Ezra Mtambeka — info@vora.co.za
If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk | Telephone: 0303 123 1113
8.2 Rights Under POPIA (South African Visitors and Data Subjects)
- Right to be notified that your personal information is being collected and processed
- Right of access to your personal information held by Vora
- Right to correction or deletion of inaccurate, irrelevant, excessive, outdated, or misleading personal information
- Right to object to the processing of your personal information
- Right to object to direct marketing communications, including retargeting advertisements
- Right to withdraw consent at any time where processing is based on consent
- Right to complain to the Information Regulator
To exercise your rights under POPIA, contact:
Ezra Mtambeka — info@vora.co.za
If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa:
Website: justice.gov.za/inforeg/ | Email: complaints.IR@justice.gov.za
9. Do Not Track Signals
Some browsers allow you to enable a "Do Not Track" (DNT) signal, which sends an automatic request to websites not to track your browsing activity. Currently, there is no universally accepted technical standard for responding to DNT signals, and our Website does not alter its behaviour in response to a DNT signal. We encourage you to use our cookie consent tool to manage your preferences directly.
10. Children's Privacy
Our Website is not directed at children under the age of 18, and we do not knowingly use cookies to collect personal data from children. If you believe that a child under 18 has provided us with personal information, please contact us at info@vora.co.za and we will take steps to delete it.
11. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our use of cookies, changes in applicable law, or changes to the services provided by our third-party partners. When we make material changes, we will update the "Last Reviewed" date at the top of this document and, where appropriate, notify you via our cookie consent notice on your next visit to the Website.
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.
12. Contact Us
If you have any questions, concerns, or requests relating to this Cookie Policy or to the way we process your personal data, please contact our Privacy Contact:
| Name | Ezra Mtambeka |
| Role | Founder & Information Officer |
| info@vora.co.za | |
| Address | 27 Grand National Boulevard, Milnerton, Cape Town, 7441, South Africa |
We aim to respond to all privacy-related enquiries within 30 days of receipt.
This Cookie Policy forms part of Vora's broader Privacy Policy and PAIA Manual. It should be read in conjunction with those documents.
Vora Cookie Policy — Version 1.0 | March 2026
Privacy Contact: Ezra Mtambeka | info@vora.co.za
www.vora.co.za