Cookie Policy

Last updated:

Effective Date: 4 March 2026  |  Last Updated: 4 March 2026  |  Document Reference: OVX-CKP-001  |  Version: 1.0

1. Introduction

1.1 About This Policy

This Cookie Policy (“Policy”) is published by Orvexium (“we,” “us,” “our,” or the “Company”) to explain how we use cookies and similar tracking technologies on our corporate website at https://orvexium.com (“Website”), why we use them, and the choices available to you regarding their use.

Orvexium is an advanced information security firm specialising in the design of secure digital infrastructures, cryptographic system development, and post-quantum cryptographic research. Our Website serves exclusively as a corporate informational and legal presentation platform. It does not offer public encryption utilities, anonymous concealment services, or any form of public-access security tool.

Consistent with our corporate identity as an information security firm, we approach the use of cookies with the same standards of proportionality, transparency, and respect for individual rights that we apply to all aspects of our data governance framework. We use cookies only where there is a clear and legitimate purpose, and we do not engage in invasive tracking, behavioural surveillance, or user profiling for commercial or unlawful purposes.

1.2 Legal Framework

This Policy has been prepared in accordance with:

  • Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR);
  • UK General Data Protection Regulation (UK GDPR) as retained under the Data Protection Act 2018;
  • Directive 2002/58/EC — ePrivacy Directive (as amended), and applicable national implementing legislation;
  • The Information Commissioner’s Office (ICO) guidance on cookies and similar technologies;
  • The European Data Protection Board (EDPB) guidelines on consent and cookie governance.

1.3 Relationship to Other Policies

This Cookie Policy should be read in conjunction with Orvexium’s Privacy Policy (OVX-PP-001), Data Protection Policy (OVX-DPP-001), and Terms and Conditions (OVX-TC-001), all of which form part of Orvexium’s corporate data governance framework.

2. What Are Cookies

2.1 Definition

Cookies are small text files that are placed on your device — such as your computer, tablet, or mobile phone — by a website when you visit it. They are widely used to make websites function efficiently, to remember user preferences, and to provide certain types of information to website operators. Cookies are stored in your browser and are returned to the originating website on each subsequent visit.

2.2 Technologies Covered

In addition to traditional cookies, this Policy also covers:

  • Web beacons and pixel tags: small transparent images embedded within web pages that enable the detection of certain user actions such as page loading;
  • Local storage objects: data stored locally on your browser through HTML5 local storage mechanisms;
  • Session tokens: temporary identifiers used to maintain the continuity of your browsing session.

2.3 Session and Persistent Cookies

  • Session cookies exist only for the duration of your visit and are automatically deleted when you close your browser;
  • Persistent cookies remain on your device for a defined period or until you delete them manually, and are used to remember preferences across multiple visits.

3. Types of Cookies Used

Orvexium uses a limited and proportionate range of cookies, organised into the following categories. We do not use advertising cookies, cross-site behavioural tracking cookies, or cookies for building user profiles for commercial targeting.

Category A — Strictly Necessary Cookies

Consent required: No — exempt from consent requirements under applicable law.

Strictly necessary cookies are essential to the functioning of the Website. They are set in response to actions you take, such as navigating between pages or completing enquiry forms. They do not collect information that could be used for marketing purposes.

Purposes: maintaining session continuity and integrity; enabling page navigation; storing temporary form data; supporting core security and request authentication; enabling load balancing.

Category B — Functional Cookies

Consent required: Yes — where required by applicable law.

Functional cookies enable the Website to remember choices you make during your visit, providing a more tailored browsing experience. They do not track your activity across third-party websites.

Purposes: remembering language or regional preferences; maintaining cookie consent preferences across sessions; remembering user interface settings.

Category C — Security Cookies

Consent required: No — implemented on the basis of technical necessity and legitimate interest.

Security cookies support the technical and operational security of the Website. As an information security firm, Orvexium maintains robust website security controls, and certain cookies form a component of these controls. Specific technical details are not disclosed in accordance with information security best practice.

Purposes: detection and mitigation of unauthorised or automated access; anti-bot and anti-scraping protection; request integrity verification; security audit records.

Category D — Analytics Cookies

Consent required: Yes — activated only upon receipt of your informed consent.

Orvexium may use analytics cookies to collect aggregated, anonymised, or pseudonymised information about how visitors interact with the Website, solely to improve its performance and content. Analytics cookies do not identify individual visitors by name and are not used for commercial profiling or advertising.

Purposes: understanding page access patterns; identifying technical issues; assessing content effectiveness; informing Website improvement decisions. Where analytics tools are deployed, IP address anonymisation is implemented.

Category E — Third-Party Cookies

Consent required: Depends on the specific third-party cookie category — non-essential third-party cookies require consent.

Certain third-party services integrated into the Website may set their own cookies when you interact with those services. These cookies are governed by the relevant third-party provider’s own privacy and cookie policies. Orvexium does not control third-party cookies and does not have access to the data collected through them except to the extent that such data is shared with us in aggregated or anonymised form.

4. Legal Basis for Use

The use of cookies on the Website is governed by Article 5(3) of the EU ePrivacy Directive and the UK GDPR. The legal bases relied upon by Orvexium are:

  • Technical Necessity (Strictly Necessary and Security Cookies): exempt from consent requirements as essential to the provision of the Website service;
  • Consent — Article 6(1)(a) UK GDPR (Functional and Analytics Cookies): non-essential cookies are set only upon receipt of your freely given, specific, informed, and unambiguous consent, which may be withdrawn at any time;
  • Legitimate Interests — Article 6(1)(f) UK GDPR (Security Cookies, where beyond technical necessity): Orvexium’s legitimate interest in maintaining the security, availability, and integrity of its digital infrastructure, assessed as not overriding visitor interests given the protective and non-intrusive nature of such processing.

5. Cookie Consent Mechanism

When you first visit the Website, you will be presented with a cookie consent banner that provides: a clear explanation of the categories of cookies used; the ability to accept all non-essential cookies; the ability to reject all non-essential cookies; and the ability to make granular selections by cookie category. Access to this Cookie Policy is available before any consent decision is made.

Your consent choices are recorded through a technically necessary cookie that stores your preference and avoids repeated consent requests. This consent preference cookie does not collect any information beyond your selection and its timestamp.

6. Managing or Withdrawing Consent

You may withdraw your consent to non-essential cookies at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal will not impair your access to the Website’s core informational content.

Cookie preferences may be updated through Orvexium’s cookie preference management interface, accessible via the “Cookie Preferences” link on the Website. You may also manage cookies through your browser settings:

Orvexium respects Do Not Track (“DNT”) signals transmitted by browsers where technically feasible and to the extent required by applicable law.

7. Retention Periods

Cookie Category Type Retention Period
Strictly Necessary (Session Management) Session Deleted when you close your browser
Strictly Necessary (CSRF / Security Tokens) Persistent Up to 30 days from date of setting
Functional (Preference Storage) Persistent Up to 12 months from last visit or consent renewal
Security Cookies Session / Persistent Duration of session, or up to 30 days for persistent security identifiers
Analytics Cookies (where applicable) Persistent Up to 13 months from date of setting
Consent Preference Cookie Persistent Up to 12 months from date of consent, after which renewed consent will be requested
Third-Party Cookies Variable Governed by the applicable third-party provider’s cookie policy

8. Third-Party Service Providers

Orvexium engages a limited number of third-party service providers whose services are integrated into the Website and who may set their own cookies. These providers act as independent data controllers with respect to data collected through their own cookies, and their practices are governed by their respective privacy and cookie policies.

Orvexium selects third-party providers on the basis of their data protection compliance posture and security standards, and engages them under appropriate contractual frameworks. Where third-party providers are engaged as data processors on our behalf, appropriate Data Processing Agreements are in place.

9. International Data Transfers

Where personal data collected through cookies may be transferred outside the United Kingdom in connection with third-party service providers, Orvexium and its providers ensure that appropriate safeguards are in place, including Standard Contractual Clauses, UK International Data Transfer Agreements (IDTAs), or transfers to countries recognised as providing an adequate level of data protection.

10. Corporate Cookie Declarations

  • No Invasive Tracking: Orvexium does not engage in cross-site behavioural tracking, surveillance, or invasive profiling through cookies or any other tracking technology;
  • No Sale of Data: Orvexium does not sell, rent, or commercially transfer any data collected through cookies to any third party;
  • No Advertising Cookies: Orvexium does not deploy advertising cookies, retargeting pixels, or commercial audience-building technologies on the Website;
  • No Anonymity Facilitation: Cookie usage on the Website does not serve any purpose related to anonymisation services, concealment tools, or circumvention of lawful oversight;
  • GDPR and ePrivacy Compliant: Cookie deployment and consent management is governed in accordance with the UK GDPR, the ePrivacy Directive, and applicable national implementing legislation;
  • Minimal and Proportionate: Orvexium uses only the minimum necessary cookies to maintain Website functionality, security, and performance.

11. Updates to This Policy

Orvexium reserves the right to update this Cookie Policy at any time to reflect changes in the cookies or tracking technologies used, applicable law or regulatory guidance, third-party providers integrated into the Website, or our data governance practices. Where updates are material, we will notify Website visitors through publication of the updated Policy with a revised “Last Updated” date, and where required, will seek renewed consent before activating revised cookies.

All superseded versions of this Policy are retained in Orvexium’s policy archive for a minimum of five (5) years and are available upon written request.

12. Contact Information

For all cookie-related enquiries, consent management requests, or questions regarding this Policy, please contact Orvexium through the following official channels:

Please mark all cookie and data protection correspondence as: “COOKIE POLICY INQUIRY” or “DATA PROTECTION INQUIRY”.

Response timelines: Cookie and consent enquiries within five (5) business days; data subject rights requests within one (1) calendar month of receipt.

You also have the right to lodge a complaint regarding Orvexium’s cookie practices with the Information Commissioner’s Office (ICO): https://ico.org.uk. In EU Member States, the relevant national supervisory authority may be identified through the European Data Protection Board: https://edpb.europa.eu.