Cookie Policy
Effective date: 28 May 2026 · Sixees Labs (Pty) Ltd
This Cookie Policy explains what cookies are, which cookies and similar technologies this website uses, the lawful basis on which we process the resulting data, and how you can control your choices. It should be read alongside our Privacy Policy.
Data controller. The data controller for the processing described in this policy is Sixees Labs (Pty) Ltd, Registration No. 2026/059262/07. Our Information Officer can be reached at [email protected].
Default state. We do not set analytics cookies until you click Accept in the cookie banner. If you have not made a choice, only the essential cookies described below are used.
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They are widely used to make websites work correctly, improve user experience, and provide information to site owners.
Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain on your device until they expire or you delete them). They can be set by the website you are visiting ("first-party") or by third-party services embedded on the page.
2. Cookies we use
We keep our cookie usage minimal. This site uses only the following:
Essential cookies
These cookies are required for the website to function correctly. They are set on the basis of our legitimate interest in operating a secure site and cannot be disabled without breaking core functionality.
| Cookie | Purpose | Duration |
|---|---|---|
XSRF-TOKEN |
Security token that protects forms from cross-site request forgery (CSRF) attacks | Session |
sixeeslabs_session |
Maintains your session state while browsing the site | 2 hours |
Analytics cookies — Google Analytics 4 (consent-based)
We use Google Analytics 4 (GA4) to understand which pages are read and how visitors move through the site. GA4 only sets identifying cookies after you click Accept in the cookie banner. Until then, GA4 runs in Consent Mode v2 with all regulated signals denied and ads_data_redaction enabled, so no identifying information is sent to Google.
Lawful basis: consent (PECR reg. 6 / UK GDPR Art. 6(1)(a)).
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
International transfer: data is transferred to the United States under Google's Data Processing Terms and the EU/UK Standard Contractual Clauses.
IP handling: GA4 truncates IP addresses by default and does not store them.
| Cookie | Purpose | Duration |
|---|---|---|
_ga |
Distinguishes unique visitors | 2 years |
_ga_<container> |
Persists session state per GA4 property | 2 years |
Withdrawing consent. You can withdraw consent at any time by clicking Manage cookies in the site footer. This clears your stored choice and re-displays the banner. We do not consider it "as easy to withdraw as to give" unless this control is always available — that is why the footer button is there on every page.
Third-party cookies — Cloudflare Turnstile
Our contact form uses Cloudflare Turnstile to protect against automated spam. Turnstile may set cookies or use browser storage to perform its security check. These are set only when you interact with the contact form, and are necessary to deliver a service you have requested (lawful basis: legitimate interest in preventing abuse).
Cloudflare's privacy practices are described at cloudflare.com/privacypolicy.
3. Cookies we do not use
We do not use:
- Advertising or remarketing cookies
- Social media tracking pixels
- Cross-site behavioural profiling cookies
4. Contact form data (not a cookie, but related)
When you send a message via the contact form, we process the personal data you provide for the sole purpose of replying to your enquiry. This processing is independent of cookies — submitting the form does not set any analytics cookies.
- Categories: name, email address, message body, IP address (logged transiently for abuse prevention), and a Cloudflare Turnstile token.
- Lawful basis: legitimate interest in responding to an inbound enquiry you have initiated (UK GDPR Art. 6(1)(f) / POPIA s11(1)(f)).
- Retention: 24 months from the date of last contact, after which messages are archived or deleted. Turnstile tokens are not retained beyond verification.
- Recipients: Sixees Labs staff who handle the enquiry. We do not share contact-form data with third parties for marketing or any unrelated purpose.
- Your rights: access, rectification, erasure, restriction, objection, and data portability. To exercise any of these, email our Information Officer at [email protected].
- Complaints: you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the South African Information Regulator (inforegulator.org.za).
Our full data-handling notice lives in the Privacy Policy.
5. Managing cookies
The fastest way to change your analytics choice is the Manage cookies link in the site footer — it clears your stored choice and re-displays the banner.
You can also control and delete cookies through your browser settings. The links below explain how to manage cookies in common browsers:
Note that disabling essential cookies may prevent some parts of this website from functioning correctly.
6. Changes to this policy
We may update this Cookie Policy from time to time, particularly if we add new features or third-party services to the site. The effective date at the top of this page reflects the most recent revision. If a change materially alters how we use cookies, we will re-prompt for your consent.
7. Contact
Questions about this policy? Email us at [email protected] or contact our Information Officer at [email protected].