Cookie Policy

How We Use Cookies to Improve Performance & Personalization

Cookie Policy

Last Updated: Dec 01, 3035

Legal Entity: Xotiv Technologies Pvt Ltd

Registered Address: A-153, Sector-63, Noida, Uttar Pradesh – 301301, India

Contact (DPO/Privacy): privacy@xotiv.com

Introduction

This Cookie Policy explains how Xotiv Technologies Pvt Ltd (“Xotiv,” “we,” “our,” or “us”) uses cookies and similar tracking technologies when you visit our websites, platforms, applications, and digital properties (“Sites”). It forms an essential component of our commitment to data privacy, transparency, and global regulatory compliance, including the GDPR, ePrivacy Directive, CCPA, SOC 3, and other applicable regional data protection laws.

We use cookies to enhance user experience, improve functionality, understand user behavior, and support personalization and analytics. This policy describes:

What cookies are
What types we use
Why we use them
How you can control them
Your rights under global privacy regulations

By continuing to browse or use our Sites, you consent to the use of cookies as described in this policy, unless you opt out through cookie settings or browser controls.

What Are Cookies?

Cookies are small text files placed on your device (computer, mobile, tablet) when you visit a website. They help the website recognize your device, remember your preferences, understand site usage, and improve overall performance.

Cookies may be:

First-Party Cookies

Set directly by Xotiv and used for functionality, security, or analytics.

Third-Party Cookies

Set by external service providers (e.g., analytics, advertising, performance monitoring).

Session Cookies

Deleted automatically when you close your browser.

Persistent Cookies

Remain on your device for a defined period unless deleted manually.

Why We Use Cookies

We use cookies for several legitimate and essential purposes, including:

Ensuring secure and reliable website operation
Enabling key functionality
Understanding how users interact with our content
Delivering personalized experiences
Enhancing marketing and advertising relevance
Conducting analytics to improve UI/UX
Supporting compliance, fraud prevention, and threat detection

We do not sell personal data, nor do we use cookies to identify individuals unless explicitly requested for a service.

Categories of Cookies We Use

Xotiv uses the following types of cookies:

Strictly Necessary Cookies

These cookies are essential for our website to function. They enable:

Page navigation
Session management
Security validation
Access to protected areas
Form submission
Load balancing

These cannot be disabled through our cookie banner but may be blocked via browser settings (which may affect site functionality).

Examples:

Authentication session cookies
CSRF protection cookies
Route balancing cookies
Preference storage for cookie consent

GDPR Legal Basis: Legitimate Interest (Article 6(1)(f)).

Performance & Analytical Cookies

Used to measure traffic, user engagement, and site performance. These help us:

Understand how visitors interact
Identify usability improvements
Detect technical issues
Optimize site functionality

We use enterprise-grade analytics tools such as:

Google Analytics / GA4
Microsoft Clarity
Hotjar (optional)
Internal analytics engines

These cookies do not identify individuals directly; data is pseudonymized where possible.

GDPR Legal Basis: Consent.

Functional Cookies

These cookies enable enhanced functionality and personalization:

Remembering preferences (language, region, layout)
Saving form inputs
Enabling chatbot and support features
Providing tailored browsing experiences

GDPR Legal Basis: Consent.

Targeting & Advertising Cookies

Used to deliver more relevant ads and limit ad overexposure. These cookies:

Track browsing behavior
Measure campaign performance
Build anonymous interest profiles
Support retargeting

We may integrate with:

Google Ads
Meta Pixel
LinkedIn Insights
HubSpot
Marketing automation tools

We do not use these cookies without explicit user consent.

GDPR Legal Basis: Consent.

Security & Fraud Prevention Cookies

Critical to protecting Xotiv’s digital infrastructure. These cookies:

Detect unusual behavior
Prevent unauthorized access
Mitigate brute-force attacks
Provide SOC 3–aligned monitoring

GDPR Legal Basis: Legitimate Interest.

Cookies Set by Third Parties

Third-party service providers may set tracking technologies when you visit our Site. These include:

Cloud hosting & CDN partners (AWS, Azure, GCP, Cloudflare)
Analytics & behavioral tools
CRM platforms (HubSpot, Salesforce)
Video hosting (YouTube, Vimeo)
Ad networks

Third-party cookies are governed by their respective policies. Xotiv ensures contractual compliance through:

Data Processing Addendums (DPAs)
Standard Contractual Clauses (SCCs)
Vendor risk assessments
SOC 3 / ISO 37001 aligned evaluations

How We Store and Process Cookie Data

Cookie data may be stored on secure servers located in India, the EU, the US, or other countries depending on vendor infrastructure.
All data transfers follow GDPR-approved mechanisms.
Personal data collected through cookies is pseudonymized, encrypted, and stored with strict access controls.

Our teams follow:

Secure SDLC
Least privilege access
Multi-factor authentication
SOC 3 monitoring
Regular vulnerability assessments

Your Choices and Cookie Management

Under global privacy laws, you have full control over non-essential cookies.

Managing Preferences Through Cookie Banner

Our cookie consent banner allows you to:

Accept all cookies
Reject all non-essential cookies
Customize cookie categories

Your preferences can be updated anytime.

Browser Controls

You can disable cookies via browser settings:

Chrome
Firefox
Safari
Edge
Opera

Note: Blocking necessary cookies may affect site functionality.

Opt-Out for Analytics & Advertising

You may opt out via:

Google Analytics Opt-Out Add-on
Google Ads Settings
Meta Ads Preferences
LinkedIn Ad Preferences
Do-Not-Track browser settings

Do Not Sell / Share (CCPA/CPRA)

If applicable, users may request:

“Do Not Sell My Personal Information”
“Do Not Share for Cross-Context Behavioral Advertising”

Xotiv does not sell personal data. However, we provide opt-out capabilities where required by law.

Legal Bases for Processing (GDPR)

Under GDPR, cookie-based data processing relies on:

Cookie Category	Legal Basis
Strictly Necessary	Legitimate Interest
Performance / Analytics	Consent
Functionality	Consent
Advertising / Targeting	Consent
Security / Fraud	Legitimate Interest

Data Retention

Cookie retention varies:

Session cookies: deleted after each session
Persistent cookies: stored between 1 day and 34 months depending on purpose
Analytics cookies: anonymized retention up to 36 months
Advertising identifiers: configurable per vendor policy

Data retained beyond operational necessity is anonymized or deleted.

Sharing of Cookie Data

We may share pseudonymized cookie-based data with:

Analytics providers
Infrastructure providers
CRM and automation tools
Compliance vendors
Cloud hosting services

We do not share data with advertisers without explicit user consent.

All vendors undergo:

Security audits
Compliance checks (SOC 3, ISO 37001, GDPR)
DPA and SCC contractual safeguards

International Data Transfers

When data is transferred outside your region, safeguards include:

EU Standard Contractual Clauses (SCCs)
Data Processing Agreements (DPAs)
Risk-based assessments
Encryption in transit and at rest
Restricted personnel access

Children’s Data

Our Sites are not intended for children under the age of 16. We do not knowingly place cookies to profile minors.

Updates to This Cookie Policy

Xotiv may periodically update this Cookie Policy to reflect:

Legal changes
Technological advancements
Vendor updates
Internal process improvements

Updates will be reflected with a revised “Last Updated” date.

Contact Us

For questions or privacy requests:

Xotiv Technologies Pvt Ltd

A-153, Sector-63, Noida, Uttar Pradesh – 301301

Email: privacy@xotiv.com