Cookie Policy

Cookies are small text files that a website or web application places on your device (computer, smartphone, or tablet) when you visit it. Each cookie contains a name, a value, an expiration date, and the domain it belongs to. Cookies are stored in your browser and sent back to the originating server on subsequent visits, enabling the server to recognize your device and recall certain information about your prior interactions.

Cookies are classified by their origin and duration. First-party cookies are set directly by Verbox domains (verbox.com and its subdomains). Third-party cookies are set by external service providers whose code runs on our pages, such as analytics or payment processing partners. By duration, session cookies are deleted when you close your browser, while persistent cookies remain on your device until they expire or are manually deleted.

In addition to cookies, we may use related tracking technologies including: web beacons (transparent 1×1 pixel images that signal when a page or email has been opened); pixel tags (similar to web beacons, often used for advertising attribution); local storage (browser-side key-value storage that persists beyond the browser session without an expiry date); and IndexedDB (a larger-capacity browser-side database for offline caching of platform data). All of these technologies are subject to the same controls and preferences as cookies under this policy.

The information collected through these technologies may include your IP address, browser and device identifiers, pages visited, time spent on pages, links clicked, and actions taken within the Platform. Where this constitutes personal data, it is processed in accordance with our Privacy Policy and applicable law.

We engage a limited number of third-party service providers whose code executes on our pages and may set their own cookies. These include infrastructure monitoring tools, analytics platforms, payment processors, and customer support widgets. We maintain a current list of these providers that is available upon request.

Each third-party provider operates under their own cookie and privacy policy, which governs their specific data collection practices. We encourage you to review the privacy policies of any third-party services you interact with. We provide links to relevant third-party privacy policies in our sub-processor list.

All third-party cookies that process personal data are subject to data processing agreements that impose obligations equivalent to our own standards, including data minimization, purpose limitation, and geographic restrictions on processing. We conduct annual reviews of our third-party cookie inventory and remove providers that no longer meet our standards.

We do not permit third-party cookies to be set within the authenticated dashboard environment. Third-party cookies are exclusively limited to our public marketing website. When you log in to the platform, only strictly necessary and functional first-party cookies are active.

Our embedded chatbot widget, when deployed on third-party websites by our customers, may set session cookies on behalf of our customers for the purpose of maintaining conversation continuity. The data controller for widget-related cookies is the customer operating the chatbot on their website, and their privacy policy governs the end user's rights in that context.

Strictly Necessary Cookies are deployed on the legal basis of legitimate interests (GDPR Art. 6(1)(f)) and the contractual necessity of providing the service you have requested (GDPR Art. 6(1)(b)). No consent is required for these cookies, and they cannot be disabled.

Analytics, Functional, and Marketing Cookies are deployed on the legal basis of your freely given, specific, informed, and unambiguous consent (GDPR Art. 6(1)(a) / UAE PDPL). Where required by applicable e-privacy regulations, we obtain your prior consent before setting these cookies.

You may withdraw your consent at any time by adjusting your preferences in our Cookie Preference Center. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. After consent is withdrawn, cookies set during the consented period will expire naturally and will not be renewed.

We retain records of all consent signals for a minimum of 3 years as evidence of compliance. These records include the timestamp, IP address hash, cookie categories consented to, and the version of this policy that was in effect at the time of consent. You may request a copy of your consent record by contacting privacy@verbox.com.

We review this Cookie Policy at least annually and update it whenever we add, change, or remove cookies, when our third-party service providers change their practices, or when applicable law requires an update.

Material changes — such as the addition of new cookie categories, new third-party providers in sensitive categories, or changes to your consent rights — will be communicated through a prominent notice on our website and via our cookie consent banner, which will re-prompt you to review and reconfirm your preferences.

Non-material updates, such as corrections to descriptions, updated provider names, or clarifications that do not change the substantive scope of cookie use, will be made without individual notice. The “Last updated” date at the top of this page will always reflect the most recent revision.

Previous versions of this Cookie Policy are available upon request from privacy@verbox.com.

If you have questions about this Cookie Policy, wish to exercise your consent rights, or want to request our sub-processor list, please contact our privacy team at privacy@verbox.com.

If you are based in the EU/EEA and believe that our use of cookies infringes applicable data protection law, you have the right to lodge a complaint with your local data protection supervisory authority. A full list of EU supervisory authorities is available at edpb.europa.eu.

Verbox Technologies LLC, Dubai, United Arab Emirates.