Cookie Policy | Quivani
Quivani's cookie policy: which cookies we use, why, retention periods, and how to manage your consent. Aligned with our Privacy Policy and GDPR.
Cookie Policy — Quivani
Version: Version: v3.1
Date: 2 October 2026
Entity: Quivani Endevio Ltd. (C 107527)
Applies to: quivani.com and all subdomains
1. What Are Cookies
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences, and collect usage data. Some cookies are strictly necessary for the site to function; others are used for analytics and performance tracking and require your explicit consent under GDPR and the ePrivacy Directive.
2. How We Use Cookies
We use cookies to:
- Ensure the website functions correctly
- Understand how visitors interact with our pages
- Improve user experience and site performance
- Record and replay anonymous session data for UX analysis
With your consent, we also use advertising cookies to measure and improve our campaigns.
3. Cookie Categories
3.1 Strictly Necessary
These cookies are essential for the website to operate. They cannot be disabled.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
__cf_bm |
Cloudflare | Bot management and security | 30 minutes |
_cfuvid |
Cloudflare | Rate limiting and session management | Session |
hubspotutk |
HubSpot | Tracks a visitor's identity for form submissions | 13 months |
__hssrc |
HubSpot | Session detection (browser restart detection) | Session |
__hssc |
HubSpot | Session tracking for analytics | 30 minutes |
| _GRECAPTCHA | Google reCAPTCHA | Protects our forms from spam and bots | 6 months |
3.2 Analytics & Performance
These cookies are only placed if you consent to analytics tracking (analytics_storage).
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics 4 | Distinguishes unique users | 2 years |
_ga_* |
Google Analytics 4 | Maintains session state | 2 years |
_gcl_au |
Conversion measurement | 90 days | |
mf_user |
Mouseflow (Mouseflow A/S, Denmark) | Identifies returning visitors for session replay and heatmap analysis | 1 year |
mf_session |
Mouseflow (Mouseflow A/S, Denmark) | Tracks the current session for recording | Session |
_clck |
Microsoft Clarity | Identifies user for behaviour analytics | 1 year |
_clsk |
Microsoft Clarity | Connects page views within a single session | 1 day |
3.3 Functional
These cookies support enhanced functionality and personalisation.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
__hstc |
HubSpot | Stores visitor identity and history for CRM continuity | 13 months |
messagesUtk |
HubSpot | Identifies returning visitors using HubSpot chat | 13 months |
| HubSpot Meetings | HubSpot | Shows the booking calendar on our booking page | See provider's policy |
3.4 Marketing
These cookies are only placed if you consent to advertising (ad_storage). They help us measure and improve our advertising campaigns.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| IDE, test_cookie | Google Ads / DoubleClick | Measures ad performance and conversions | Up to 13 months |
| HubSpot ads pixel | HubSpot | Measures conversions from our ad campaigns | See provider's policy |
| LinkedIn Insight Tag, Meta Pixel (where enabled) | LinkedIn, Meta | Measures conversions from social media campaigns | See provider's policy |
4. Third-Party Processors
| Processor | Country | Data Transfer Basis | Service |
|---|---|---|---|
| Google LLC | USA | Standard Contractual Clauses (SCCs) | Analytics (GA4), Tag Manager, Ads, reCAPTCHA, Fonts |
| HubSpot Inc. | USA | Standard Contractual Clauses (SCCs) | CRM, forms, chat |
| Cloudflare Inc. | USA | Standard Contractual Clauses (SCCs) | Security, CDN |
| Mouseflow A/S | Denmark (EU) | No transfer — EU-based | Session replay, heatmaps |
| Microsoft Corporation | USA | Standard Contractual Clauses (SCCs) | Clarity behaviour analytics |
| Ahrefs Pte. Ltd. | Singapore | Standard Contractual Clauses (SCCs) | Website analytics |
| LinkedIn Ireland | Ireland (EU) | No transfer — EU-based | Advertising measurement |
| Meta Platforms Ireland | Ireland (EU) | No transfer — EU-based | Advertising measurement |
5. Your Consent Choices
When you first visit this website, you will be asked to accept or decline cookies via our consent banner (powered by HubSpot). You may withdraw or update your consent at any time by:
- Clicking the "Cookie Settings" link in the footer of any page
- Clearing your browser cookies and reloading the page to re-trigger the consent prompt
Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
6. Legal Basis
Our use of analytics cookies is based on your explicit consent (GDPR Article 6(1)(a)). Strictly necessary cookies are placed on the basis of our legitimate interest in operating a functional website (GDPR Article 6(1)(f)).
7. Data Retention
Session recording data collected via Mouseflow is retained for a maximum of 12 months, after which it is automatically deleted. Google Analytics data is retained for 14 months. You may request deletion of your data at any time by contacting us.
8. Contact
For any queries regarding our use of cookies or to exercise your data rights:
Quivani Endevio Ltd. (C 107527)
Email: info@quivani.com
Postal:
Level 2, The Brewhouse
Mdina Road
Central Business District, Zone 2
Birkirkara CBD 2010
Malta
9. Changes to This Policy
This policy was last updated on 2 October 2026 (v3.1). We will notify users of material changes via the website consent banner.