Last updated: [30 October, 2025]
1. Introduction
This Cookie Policy explains how we use cookies and similar technologies (e.g. web beacons, pixels, local storage) on https://onlytribe-za.co/ (the “Site”), and your rights to control them.
By using or accessing our Site, you agree to the placement of cookies as described in this policy (to the extent you grant consent where required).
We use cookies to distinguish you from other users, help us provide a better experience, analyze site usage, personalize content, and deliver relevant advertisements.
This Cookie Policy should be read together with our Privacy Policy and forms part of the same legal framework governing our Sites and Services.
Where required under applicable law (including the EU ePrivacy Directive, GDPR, and the UAE PDPL), we will only place non-essential cookies after obtaining your explicit consent.
2. What Are Cookies
Cookies are small text files placed on your device when you visit a website. This includes tracking technologies defined as ‘online identifiers’ under Article 10 of the DIFC Data Protection Law 2020. They are used to make websites work efficiently, improve user experience, and provide analytical or marketing insights. Similar technologies, such as web beacons, pixels, SDKs, and local storage, perform related functions and are included under the term “cookies” in this policy.
Cookies may be:
- Session cookies, which expire when you close your browser, or
- Persistent cookies, which remain until deleted or expired.
They can also be:
- First-party cookies, set by us, or
- Third-party cookies, set by service providers such as Google or Hotjar.
3. Why We Use Cookies
We use cookies to:
- Operate and secure our Sites;
- Recognize returning visitors and remember preferences (e.g. language);
- Analyze site traffic, behavior, and usage trends (via Google Analytics and Hotjar);
- Deliver relevant marketing and advertising via Google AdWords and Google DoubleClick;
- Diagnose technical issues and improve user experience.
We process cookie data where:
- It is necessary for providing our Sites or Services;
- You have given consent for analytics or advertising cookies; or
- We have a legitimate interest (e.g. ensuring network security or service integrity) in compliance with GDPR, CCPA, and other applicable laws.
Our legal basis for using cookies depends on the jurisdiction of the visitor:
- In the EU/UK, consent is required for all non-essential cookies.
- In the UAE (mainland), consent is required under Federal Decree-Law No. 45 of 2021.
- In the DIFC, legitimate interest may apply for security or essential analytics, provided a balancing test is documented.
- In the U.S., cookies may be used in accordance with state privacy laws (e.g., CCPA/CPRA) and browser opt-out preferences.”
4. Types of Cookies Used
| Category | Purpose | Examples | Legal Basis | Retention |
| Strictly Necessary | Enable basic functionality such as login, session management, load balancing, and language settings. | session_id, cookie_consent | Contractual necessity / Legitimate interest | Session |
| Performance / Analytics | Measure usage of our Sites and improve performance. | Google Analytics (_ga, _gid), Hotjar tracking cookies | Consent | GA: 26 months, Hotjar: 365 days |
| Functional | Remember preferences and enhance user experience. | lang_pref, user_settings | Consent or Legitimate interest | 6–12 months (auto-expire after 12 months at the latest) |
| Advertising / Targeting | Deliver personalized ads and limit ad frequency. | Google AdWords, Google DoubleClick cookies | Consent | For advertising cookies linked to transaction verification (e.g., proof of subscription or billing under applicable tax laws), pseudonymized records may be retained for audit purposes for up to 10 years, in accordance with our Data Retention Policy. Actual cookie files are not stored that long. |
We do not sell, rent, or trade personal data for marketing purposes, but we may share aggregated, non-identifiable analytics data with trusted affiliates or partners.
5. Third-Party Cookies
We use third-party tools that may set cookies on your device:
| Service | Purpose | Provider Location | Privacy Link |
| Google Analytics | Site usage analytics | United States / EU | https://policies.google.com/privacy |
| Google AdWords | Advertising and retargeting | United States / EU | https://ads.google.com/home/ |
| Google DoubleClick | Ad personalization and frequency control | United States / EU | https://support.google.com/adsense/answer/2839090 |
| Hotjar | Heatmaps and behavioral analytics | Ireland (EU) | https://www.hotjar.com/legal/policies/privacy/ |
Each provider processes data under its own privacy policy. Where data may be transferred outside your jurisdiction, we ensure appropriate safeguards (e.g. Standard Contractual Clauses or adequacy decisions).
We are not responsible for the privacy practices of third-party providers. We recommend reviewing their respective privacy policies directly. Where third-party providers process data outside your jurisdiction, we rely on Standard Contractual Clauses or other lawful transfer mechanisms as applicable.
6. How You Can Manage Cookies
You can control and manage cookies in the following ways:
- Consent Manager: Use the cookie banner on our website to accept or reject non-essential cookies.
- Browser Settings: Adjust your browser to refuse cookies or alert you when cookies are being used.
- Opt-Out Tools:
- Google Analytics: https://tools.google.com/dlpage/gaoptout
- Google Ad settings: https://www.google.com/settings/ads
- Hotjar: https://www.hotjar.com/opt-out
- Withdraw Consent: You may withdraw your consent at any time through our cookie preferences settings.
Please note that disabling cookies may limit some functionality of our Sites or Services.
7. Data Retention and Security
We retain cookie-related data in accordance with our Data Protection Policies and Procedures, specifically:
- Google Analytics: 26 months
- Hotjar: 365 days
- AdWords / DoubleClick: as long as legally required.
Cookies and tracking data are stored securely and protected using encryption, access controls, and regular vulnerability assessments.
8. International Data Transfers
Because we operate globally, your cookie data may be processed in countries outside your residence, including the United States and the United Arab Emirates. Transfers are made only under lawful mechanisms:
- EU/UK: Standard Contractual Clauses or adequacy decisions;
- UAE: compliance with Federal Decree-Law No. 45 of 2021 and, where applicable, prior approval from the UAE Data Office;
- DIFC: adherence to DIFC DP Law 2020 Articles 26–27 on cross-border transfers.
Where transfers occur to the United States, we rely on the EU-U.S. Data Privacy Framework or equivalent adequacy mechanisms.
For DIFC entities, data transfers outside the DIFC follow Articles 26–27 and, where appropriate, the Ethical Data Management Risk Index (EDMRI) process.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your data processed through cookies;
- Request deletion or correction;
- Withdraw consent;
- Object to processing (including profiling or marketing);
- File a complaint with your local data protection authority.
Requests can be sent to .
You may withdraw consent for non-essential cookies through the Cookie Settings interface at any time.
If you believe our processing is not compliant, you may lodge a complaint with:
- EU/UK: your local supervisory authority or the Dutch DPA;
- UAE (DIFC): the DIFC Commissioner of Data Protection;
- U.S.: your state Attorney General or relevant privacy authority
10. Updates to This Policy
We may update this Cookie Policy periodically. Each new version will indicate both the ‘last updated’ and ‘effective’ dates. Material updates will be announced at least 30 days before taking effect.
11. Contact Information
For any questions or requests regarding this Cookie Policy, please contact:
Email:
Phone:
12. Disclaimer
While we take reasonable steps to ensure accuracy, we do not guarantee that third-party advertising networks or analytics tools will comply with their own cookie obligations. Your continued use of our Site implies acceptance of third-party risk within applicable law.