Every cookie and tracking technology we use on vistoplex.com — what it does, how long it lasts, who provides it, and exactly how to switch it off. Compliant with PECR, UK GDPR and the ICO's 2024 guidance on consent for non-essential cookies.
We group every cookie into one of four buckets. Only the first one is set without your consent — everything else waits for your "Accept" tap or follows the choice you make in the preference centre.
This cookies policy explains how Vistoplex ("Vistoplex", "we", "us", "our") uses cookies and similar tracking technologies on vistoplex.com and any related sub-domain we operate.
It is intended to be read alongside our Privacy Policy, which explains the broader picture of how we handle personal data. Where this policy refers to "personal data", "data controller", "data processor" or any other defined term, those terms have the meaning given to them in UK GDPR.
This policy is reviewed and updated at least every 12 months, and every time we add, remove or materially change a tracking technology on the site.
A cookie is a small text file that a website places on your device (computer, tablet, phone) when you visit it. The cookie lets the website recognise your device on subsequent visits, store small amounts of data, and remember things like your preferences or whether you are signed in.
Cookies are categorised in two main ways:
"Similar technologies" used on this site include local storage, session storage, tracking pixels (1×1 transparent images that record an event), web beacons, SDKs on embedded media players, and fingerprinting signals (such as user-agent and screen-size combinations). This policy treats all of these the same way as cookies.
We use cookies and similar technologies for the following purposes:
In the UK, the use of cookies is regulated by Regulation 6 of the Privacy and Electronic Communications Regulations 2003 ("PECR"), which sits alongside the UK GDPR. Under that framework:
To meet that standard, vistoplex.com uses a consent-management platform that:
cookieyes-consent (or equivalent — see inventory) so we can demonstrate compliance;We group every cookie on this site into one of four categories. The dashboard at the top of this page is the same set, in shorter form. The full inventory in Section 6 shows which category each individual cookie belongs to.
Cookies that are essential for the website to function. Examples: balancing traffic across our servers, blocking automated abuse, recording your consent choice, securing form submissions against cross-site request forgery. Without these, the site simply wouldn't work properly.
Cookies that remember choices you make to give you a better experience — for example, the language you set, whether you've dismissed an announcement bar, or your preference for dark or light mode where applicable.
Cookies that collect aggregated, anonymised information about how visitors use our site — which pages are popular, how long people spend on each page, which calls-to-action are clicked, and where in the journey people drop out. This helps us improve the site over time.
Cookies set by us and by partner advertising networks (Google, LinkedIn, Meta) to measure the performance of our advertising campaigns, attribute conversions to the right source, and show relevant follow-up content elsewhere on the web.
The tables below list every cookie we currently set, broken down by category. This inventory is verified by an automated scan and a manual review at least once a quarter. If you spot a cookie on the site that isn't listed here, please let us know at privacy@vistoplex.com — we'd genuinely like to fix it.
| Cookie | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
cookieyes-consent |
Cookiebot | 1st party | Stores your cookie consent choice across categories so we don't show the banner on every page load. | 12 months |
wordpress_test_cookie |
WordPress | 1st party | Tests whether your browser accepts cookies, so we know whether to fall back to cookieless mode. | Session |
__cf_bm |
Cloudflare | 3rd party | Bot management — distinguishes humans from automated traffic to keep the site secure and stable. | 30 minutes |
cf_clearance |
Cloudflare | 3rd party | Confirms your browser has passed Cloudflare's security challenge so you don't have to re-prove it on every page. | 1 year |
| Cookie | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
vp_locale |
Vistoplex | 1st party | Remembers whether you're viewing the UK or UAE version of pages where regional content applies (pricing, contact details). | 6 months |
vp_announce_seen_* |
Vistoplex | 1st party | Remembers which announcement banners you've already dismissed so we don't keep showing them. | 90 days |
| Cookie | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
_ga |
Google Analytics 4 | 3rd party | Distinguishes unique users by assigning a randomly generated client ID. Powers session, source and audience reporting. | 2 years |
_ga_<ID> |
Google Analytics 4 | 3rd party | Stores session state for a specific GA4 property. Used to maintain session continuity across pages. | 2 years |
_gid |
Google Analytics | 3rd party | Distinguishes unique users for short-window reporting (24 h). | 30 minutes |
_gat_gtag_<ID> |
Google Tag Manager | 3rd party | Throttles request rate to Google Analytics on busy pages so we don't overload the endpoint. | 1 minute |
_clck / _clsk |
Microsoft Clarity | 3rd party | Powers heat-mapping and session-replay so we can see (anonymously) how people interact with the page — where they hover, click, and scroll. | 1 year / 1 day |
| Cookie | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
_gcl_au |
Google Ads (Conversion Linker) | 3rd party | Links a click on a Google Ad to a subsequent action on the site so we can attribute conversions to the right campaign. | 90 days |
_fbp |
Meta (Facebook Pixel) | 3rd party | Used by Meta to measure ad performance and to build custom and lookalike audiences for our Facebook and Instagram campaigns. | 90 days |
fr |
Meta | 3rd party | Used by Meta to deliver, measure and improve the relevance of ads shown across the Meta network. | 90 days |
li_sugr / bcookie / UserMatchHistory |
LinkedIn Insight Tag | 3rd party | Powers LinkedIn campaign attribution, conversion tracking and audience-building for our B2B campaigns. | Up to 1 year |
VISITOR_INFO1_LIVE / YSC |
YouTube (Google) | 3rd party | Set when a YouTube video is embedded on a page. Used to measure viewer bandwidth and track unique views of the embedded video. | 6 months / Session |
vp_attr |
Vistoplex | 1st party | Captures the original UTM parameters for your visit (utm_source, utm_medium, utm_campaign) and passes them through with the form submission, so we know which marketing activity led to the enquiry. | 30 days |
Many of the cookies above are set by third parties under their own privacy policies. We don't control how those parties use the data they collect. The most material third parties, with links to their own privacy and cookie information, are:
Where any of these providers transfer data outside the UK, we rely on the safeguards described in our privacy policy (UK adequacy regulations, the UK International Data Transfer Agreement, or EU Standard Contractual Clauses with the UK Addendum).
Browsers also support localStorage and sessionStorage as alternatives to cookies. Where we use them — typically for caching small bits of UI state such as which tab on a page is open — we treat them as the equivalent category of cookie and gate them behind the same consent.
Tracking pixels (1×1 transparent images) are loaded by Meta, LinkedIn and Google to record an event such as a page view or conversion. They go hand-in-hand with the cookies listed in Section 6 and are blocked by the same consent toggle.
For Google Ads and Meta we also operate server-side conversion tracking (Google Enhanced Conversions and the Meta Conversions API). When you submit a form on the site and you have consented to marketing cookies, a hashed version of your email address may be sent server-to-server to those providers to improve attribution. The hashing is one-way — we do not, and they cannot, recover the plain-text email from the hash.
Our hosting provider (Krystal) and our CDN (Cloudflare) keep standard server access logs containing IP address, user-agent, timestamp, page requested and response code. These logs are kept for 30 days for security, debugging and abuse-prevention purposes. They are not subject to consent because they fall under the "strictly necessary" exemption.
You can change your cookie choice at any time:
Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
You can also block or delete cookies using your browser's settings. Doing so may break parts of the site that rely on functional cookies (saved preferences, etc.) but will not prevent you from accessing the main content.
You can opt out of behavioural advertising from many providers in one place via the following industry opt-out tools:
Modern browsers can broadcast two privacy signals to every website you visit:
If you'd prefer not to be asked at all, enable GPC in a browser that supports it (Brave, Firefox, DuckDuckGo browser, and several Chrome/Safari extensions) and our site will pre-set your choice on first visit.
We update this cookies policy whenever we add, remove or materially change a tracking technology on the site, and we re-audit the inventory at least once a quarter. The "Last audit" date in the meta strip at the top of this page tells you when the latest revision was published. If a change materially affects how your data is processed, we will trigger a re-consent prompt the next time you visit so you can refresh your choice.
For any question about this cookies policy or about a specific cookie:
Email: privacy@vistoplex.com
Post: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ · United Kingdom
If you'd like to make a complaint about how we handle cookies or any other personal data, you have the right to do so directly to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We'd appreciate the chance to fix the issue first, but you don't have to come to us before going to them.