Effective date: 21 April 2026 · Next scheduled review: 21 April 2027
This Cookie Policy explains how Hinc Group (Pty) Ltd ("Hinc Group", "we", "us", "our") uses cookies and similar tracking technologies on hincgroup.com and any associated subdomains (collectively, the "Site"). It should be read alongside our Privacy Policy, which sets out the broader framework for how we process personal information.
We are committed to transparency. This policy is designed to comply with the South African Protection of Personal Information Act 4 of 2013 (POPIA), the EU General Data Protection Regulation (GDPR), the UK GDPR, the ePrivacy Directive (2002/58/EC) as amended, and the UAE Personal Information Protection Act (PIPA).
Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They allow the site to recognise your device on subsequent visits and store certain information about your preferences or actions. Cookies are not programs and cannot carry viruses or install malware.
In addition to cookies, we may use web beacons (also called pixel tags or clear GIFs), local storage, and session storage — collectively referred to in this policy as "cookies" unless otherwise specified.
Cookies on the Site are set either by Hinc Group directly (first-party cookies) or by third-party service providers whose tools we have integrated into the Site (third-party cookies). We exercise reasonable care in selecting third-party providers, but we do not control the cookies they set. You should review the privacy and cookie policies of those third parties directly.
We classify cookies into four categories based on their purpose. The table below describes each category, provides examples, and indicates whether consent is required.
| Category | Purpose | Examples | Consent Required? |
|---|---|---|---|
| Strictly Necessary | Essential for the Site to function. Without these, services you have requested cannot be provided. These cookies do not collect information that could be used for marketing. | Session management, CSRF protection, load balancing, security tokens | No — legitimate interest / legal obligation basis applies |
| Functional / Preference | Remember choices you make (e.g., language, region, form pre-fill) to provide a more personalised experience. | Language preference, contact form pre-fill state, scroll position memory | Yes — opt-in consent required under GDPR/UK GDPR; POPIA legitimate interest may apply in SA |
| Analytics / Performance | Collect aggregated, anonymised data about how visitors use the Site to help us improve performance, content, and navigation. | Page view counts, session duration, bounce rate, referral source (e.g., Manus Analytics) | Yes — opt-in consent required under GDPR/UK GDPR and ePrivacy Directive |
| Marketing / Targeting | Track browsing activity across websites to deliver relevant advertising and measure campaign effectiveness. | Retargeting pixels, LinkedIn Insight Tag, Google Ads conversion tracking | Yes — explicit opt-in consent required under all applicable frameworks |
The following table lists the specific cookies currently set on the Site, their origin, duration, and category.
| Cookie Name | Set By | Duration | Category | Purpose |
|---|---|---|---|---|
| session | Hinc Group (first-party) | Session (expires on browser close) | Strictly Necessary | Maintains your authenticated session state during a single visit |
| csrf_token | Hinc Group (first-party) | Session | Strictly Necessary | Cross-site request forgery protection for form submissions |
| hinc_pref | Hinc Group (first-party) | 12 months | Functional | Stores user interface preferences (e.g., contact form pre-fill selections) |
| _manus_analytics | Manus Analytics (first-party) | 13 months | Analytics | Tracks page views and session metrics in aggregated, anonymised form to improve site performance |
| _ga | Google Analytics (third-party) | 24 months | Analytics | Distinguishes unique users for Google Analytics reporting (if enabled) |
| _ga_* | Google Analytics (third-party) | 24 months | Analytics | Stores and counts page views for Google Analytics 4 (if enabled) |
| li_sugr | LinkedIn (third-party) | 90 days | Marketing | LinkedIn Insight Tag — used for conversion tracking and retargeting (if enabled) |
| bcookie | LinkedIn (third-party) | 12 months | Marketing | Browser identification for LinkedIn advertising services (if enabled) |
This table is updated periodically. Third-party cookies marked "(if enabled)" are only set when you have provided consent via our cookie preference centre.
Our legal basis for setting cookies varies by category and jurisdiction:
| Cookie Category | POPIA Basis (SA) | GDPR / UK GDPR Basis (EU/UK) | UAE PIPA Basis |
|---|---|---|---|
| Strictly Necessary | Legitimate interest (s. 11(1)(f)) — essential to provide the requested service | Legitimate interest (Art. 6(1)(f)) or performance of a contract (Art. 6(1)(b)) | Legitimate interest |
| Functional / Preference | Legitimate interest or consent (s. 11(1)(a)) | Consent (Art. 6(1)(a)) via cookie banner | Consent |
| Analytics / Performance | Consent (s. 11(1)(a)) | Consent (Art. 6(1)(a)) — required under ePrivacy Directive | Consent |
| Marketing / Targeting | Consent (s. 11(1)(a)) | Explicit consent (Art. 6(1)(a)) — required under ePrivacy Directive | Explicit consent |
You have several options for controlling cookies:
When you first visit the Site, a cookie consent banner will appear. You may accept all cookies, reject non-essential cookies, or customise your preferences by category. You can revisit and update your preferences at any time by clicking the "Cookie Settings" link in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Most browsers allow you to refuse or delete cookies through their settings. The links below provide guidance for the most common browsers. Note that blocking all cookies may impair the functionality of the Site.
You may opt out of third-party analytics and advertising cookies directly through the following industry tools:
Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is currently no universally accepted standard for responding to DNT signals, the Site does not alter its data collection practices in response to DNT signals. You may use the opt-out mechanisms described in Section 6 to control cookie usage.
The Site is directed at business professionals and is not intended for use by children under the age of 18. We do not knowingly set cookies on devices used by children. If you believe a child has provided personal information through the Site, please contact us at [email protected] and we will take steps to delete the information.
Some third-party cookies (e.g., Google Analytics, LinkedIn) may result in personal data being transferred to and processed in countries outside South Africa, the European Economic Area, or the United Kingdom. Where such transfers occur, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement (IDTA), and equivalent mechanisms under POPIA. For further information on cross-border transfers, please refer to Section 13 of our Privacy Policy.
Cookie data is retained for the duration specified in the cookie itself (see Section 4). Analytics data collected via cookies is retained in aggregated, anonymised form for up to 26 months from the date of collection. Where cookie data constitutes personal information under POPIA or personal data under GDPR, it is subject to the retention periods set out in our Privacy Policy and is deleted or anonymised when no longer necessary for the purpose for which it was collected.
To the extent that cookie data constitutes personal information or personal data under applicable law, you have the following rights, subject to applicable exemptions and limitations:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of personal data processed via cookies | Email [email protected] with subject 'Data Subject Access Request' |
| Correction / Rectification | Request correction of inaccurate personal data | Email [email protected] |
| Erasure / Deletion | Request deletion of personal data collected via non-essential cookies | Withdraw consent via cookie preference centre or email [email protected] |
| Restriction | Request that we restrict processing of your personal data | Email [email protected] |
| Objection | Object to processing based on legitimate interests | Email [email protected] |
| Portability | Receive personal data in a structured, machine-readable format (GDPR/UK GDPR) | Email [email protected] |
| Withdraw Consent | Withdraw previously given consent at any time without affecting prior processing | Cookie preference centre or email [email protected] |
We will respond to all valid requests within 30 days (extendable by a further 60 days for complex requests under GDPR). There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
If you believe we have not handled your cookie-related personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant supervisory authority:
| Jurisdiction | Authority | Contact |
|---|---|---|
| South Africa | Information Regulator (SA) | inforeg.org.za | [email protected] |
| European Union | Lead supervisory authority in your EU member state | edpb.europa.eu/about-edpb/board/members_en |
| United Kingdom | Information Commissioner's Office (ICO) | ico.org.uk | 0303 123 1113 |
| United Arab Emirates | UAE Data Office | dataoffice.ae |
We review this Cookie Policy at least annually and whenever there is a material change to our cookie practices or applicable law. The effective date at the top of this page will be updated to reflect any revisions. Where changes are material, we will notify you by displaying a prominent notice on the Site or, where we hold your email address, by direct communication. Continued use of the Site after the effective date of any revision constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests relating to this Cookie Policy or our use of cookies, please contact our Information Officer:
Hinc Group (Pty) Ltd
Information Officer
210 Amarand Avenue, Manly Maine, Pegasus Building 1, 0181, Pretoria, South Africa
Email: [email protected]
Website: hincgroup.com
Related Legal Documents
This Cookie Policy should be read alongside our Privacy Policy.