Cookie Policy

Last updated: [30 October, 2025] 

1. Introduction 

This Cookie Policy explains how we use cookies and similar technologies (e.g. web beacons, pixels, local storage) on https://onlytribe-za.co/ (the “Site”), and your rights to control them. 

By using or accessing our Site, you agree to the placement of cookies as described in this policy (to the extent you grant consent where required). 

We use cookies to distinguish you from other users, help us provide a better experience, analyze site usage, personalize content, and deliver relevant advertisements. 

This Cookie Policy should be read together with our Privacy Policy and forms part of the same legal framework governing our Sites and Services. 

Where required under applicable law (including the EU ePrivacy Directive, GDPR, and the UAE PDPL), we will only place non-essential cookies after obtaining your explicit consent. 

2. What Are Cookies 

Cookies are small text files placed on your device when you visit a website. This includes tracking technologies defined as ‘online identifiers’ under Article 10 of the DIFC Data Protection Law 2020. They are used to make websites work efficiently, improve user experience, and provide analytical or marketing insights. Similar technologies, such as web beacons, pixels, SDKs, and local storage, perform related functions and are included under the term “cookies” in this policy. 

Cookies may be: 

  • Session cookies, which expire when you close your browser, or 
  • Persistent cookies, which remain until deleted or expired. 

They can also be: 

  • First-party cookies, set by us, or 
  • Third-party cookies, set by service providers such as Google or Hotjar. 

3. Why We Use Cookies 

We use cookies to: 

  • Operate and secure our Sites; 
  • Recognize returning visitors and remember preferences (e.g. language); 
  • Analyze site traffic, behavior, and usage trends (via Google Analytics and Hotjar); 
  • Deliver relevant marketing and advertising via Google AdWords and Google DoubleClick; 
  • Diagnose technical issues and improve user experience. 

We process cookie data where: 

  • It is necessary for providing our Sites or Services; 
  • You have given consent for analytics or advertising cookies; or 
  • We have a legitimate interest (e.g. ensuring network security or service integrity) in compliance with GDPR, CCPA, and other applicable laws. 

Our legal basis for using cookies depends on the jurisdiction of the visitor: 

  • In the EU/UK, consent is required for all non-essential cookies. 
  • In the UAE (mainland), consent is required under Federal Decree-Law No. 45 of 2021. 
  • In the DIFC, legitimate interest may apply for security or essential analytics, provided a balancing test is documented. 
  • In the U.S., cookies may be used in accordance with state privacy laws (e.g., CCPA/CPRA) and browser opt-out preferences.” 

4. Types of Cookies Used 

Category Purpose Examples Legal Basis Retention 
Strictly Necessary Enable basic functionality such as login, session management, load balancing, and language settings. session_id, cookie_consent Contractual necessity / Legitimate interest Session 
Performance / Analytics Measure usage of our Sites and improve performance. Google Analytics (_ga, _gid), Hotjar tracking cookies Consent GA: 26 months, Hotjar: 365 days  
Functional Remember preferences and enhance user experience. lang_pref, user_settings Consent or Legitimate interest 6–12 months (auto-expire after 12 months at the latest) 
Advertising / Targeting Deliver personalized ads and limit ad frequency. Google AdWords, Google DoubleClick cookies Consent For advertising cookies linked to transaction verification (e.g., proof of subscription or billing under applicable tax laws), pseudonymized records may be retained for audit purposes for up to 10 years, in accordance with our Data Retention Policy. Actual cookie files are not stored that long. 

We do not sell, rent, or trade personal data for marketing purposes, but we may share aggregated, non-identifiable analytics data with trusted affiliates or partners. 

5. Third-Party Cookies 

We use third-party tools that may set cookies on your device: 

Service Purpose Provider Location Privacy Link 
Google Analytics Site usage analytics United States / EU https://policies.google.com/privacy 
Google AdWords Advertising and retargeting United States / EU https://ads.google.com/home/ 
Google DoubleClick Ad personalization and frequency control United States / EU https://support.google.com/adsense/answer/2839090 
Hotjar Heatmaps and behavioral analytics Ireland (EU) https://www.hotjar.com/legal/policies/privacy/ 
   

Each provider processes data under its own privacy policy. Where data may be transferred outside your jurisdiction, we ensure appropriate safeguards (e.g. Standard Contractual Clauses or adequacy decisions).  

We are not responsible for the privacy practices of third-party providers. We recommend reviewing their respective privacy policies directly. Where third-party providers process data outside your jurisdiction, we rely on Standard Contractual Clauses or other lawful transfer mechanisms as applicable. 

6. How You Can Manage Cookies 

You can control and manage cookies in the following ways: 

  1. Consent Manager: Use the cookie banner on our website to accept or reject non-essential cookies. 
  1. Browser Settings: Adjust your browser to refuse cookies or alert you when cookies are being used. 
  1. Opt-Out Tools: 
  1. Withdraw Consent: You may withdraw your consent at any time through our cookie preferences settings. 

Please note that disabling cookies may limit some functionality of our Sites or Services. 

7. Data Retention and Security 

We retain cookie-related data in accordance with our Data Protection Policies and Procedures, specifically: 

  • Google Analytics: 26 months 
  • Hotjar: 365 days 
  • AdWords / DoubleClick: as long as legally required. 

Cookies and tracking data are stored securely and protected using encryption, access controls, and regular vulnerability assessments. 

8. International Data Transfers 

Because we operate globally, your cookie data may be processed in countries outside your residence, including the United States and the United Arab Emirates. Transfers are made only under lawful mechanisms: 

  • EU/UK: Standard Contractual Clauses or adequacy decisions; 
  • UAE: compliance with Federal Decree-Law No. 45 of 2021 and, where applicable, prior approval from the UAE Data Office; 
  • DIFC: adherence to DIFC DP Law 2020 Articles 26–27 on cross-border transfers. 

Where transfers occur to the United States, we rely on the EU-U.S. Data Privacy Framework or equivalent adequacy mechanisms. 
For DIFC entities, data transfers outside the DIFC follow Articles 26–27 and, where appropriate, the Ethical Data Management Risk Index (EDMRI) process. 

9. Your Rights 

Depending on your jurisdiction, you may have the right to: 

  • Access your data processed through cookies; 
  • Request deletion or correction; 
  • Withdraw consent; 
  • Object to processing (including profiling or marketing); 
  • File a complaint with your local data protection authority. 

Requests can be sent to 

You may withdraw consent for non-essential cookies through the Cookie Settings interface at any time. 
If you believe our processing is not compliant, you may lodge a complaint with: 

  • EU/UK: your local supervisory authority or the Dutch DPA; 
  • UAE (DIFC): the DIFC Commissioner of Data Protection; 
  • U.S.: your state Attorney General or relevant privacy authority 

10. Updates to This Policy 

We may update this Cookie Policy periodically. Each new version will indicate both the ‘last updated’ and ‘effective’ dates. Material updates will be announced at least 30 days before taking effect. 

11. Contact Information 

For any questions or requests regarding this Cookie Policy, please contact: 

Email: 
Phone: 

12. Disclaimer 

While we take reasonable steps to ensure accuracy, we do not guarantee that third-party advertising networks or analytics tools will comply with their own cookie obligations. Your continued use of our Site implies acceptance of third-party risk within applicable law.