Cookie Policy

1. Overview

This website uses a limited set of first-party cookies. We do not use third-party advertising, remarketing, or cross-site tracking cookies under any circumstances. This policy explains what cookies we set, their purpose, and how you can control them.

2. Your Choices

On your first visit, a consent banner allows you to choose:

• Accept All: Enables essential and functional cookies.
• Essential Only: Limits cookies to those required for security and core functionality.

You can reset your preference at any time by clearing your browser cookies for this site. The banner will reappear on your next visit.

3. Essential Cookies

Required for security, anti-fraud protection, and core website operation. Always active regardless of consent choice. No personally identifiable information.

• Bot detection — Verifies human visitors for form protection. Expires: 24 hours.
• CSRF token — Prevents cross-site request forgery on form submissions. Expires: 2 hours.
• Session — Maintains authenticated session state for authorised users. Expires: 1 hour.
• Rate limiter — Prevents form spam without requiring CAPTCHA. Expires: 1 day.
• Login counter — Mitigates brute-force authentication attacks. Expires: 1 hour.
• Device trust — Reduces login friction on previously verified devices. Expires: 30 days.

4. Functional Cookies

Set only when you choose "Accept All". Used to understand visitor behaviour and improve experience. All expire within 90 days. No advertising data.

• Attribution — Records how you found us (search, referral, direct). Expires: 90 days.
• Engagement — Pages viewed, time on site, scroll depth. Expires: 30 days.
• Return visitor — Visit frequency for content relevance. Expires: 90 days.
• Form pre-fill — Remembers your contact details for convenience. Expires: 30 days.
• Theme preference — Persists your dark/light mode selection. Expires: 90 days.
• A/B variant — Ensures a consistent experience across sessions. Expires: 30 days.
• Interaction tracking — CTA clicks and scroll engagement. Expires: 30 days.
• Download tracking — Records which resources you accessed. Expires: 30 days.
• Recently viewed — Services pages you previously visited. Expires: 7 days.
• Banner dismissal — Keeps dismissed notices hidden. Expires: 90 days.

5. What We Do Not Use

• No Google Analytics, Google Ads, or any Google tracking product.
• No Meta Pixel, LinkedIn Insight, or social media tracking.
• No third-party advertising or remarketing cookies.
• No cross-domain or cross-site tracking.
• No browser fingerprinting or covert identification techniques.
• No cookie data is sold, shared, or disclosed to third parties.

6. Local Storage

Partially completed form data is saved to your browser's local storage to prevent accidental data loss. This information never leaves your device and is automatically cleared upon form submission. It is not a cookie and cannot be accessed by any external service.

7. Managing Cookies

Most browsers allow you to block or delete cookies through their settings. Disabling essential cookies may impair form submissions and security features.

• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Edge: Settings > Cookies and Site Permissions

8. Updates

This cookie policy may be updated to reflect changes in our technology or practices. The effective date above will be revised upon any amendment.

9. Contact

• Email: info@enorby.co.nz
• Phone: 020 4047 7367