Cookie Policy
Effective date: see the version banner at the top of this page.
This policy explains how ItsSuite (operated by Zilo Software (Pty) Ltd) uses cookies and similar technologies, what your choices are, and how to change them.
For the broader privacy story see the Privacy Policy and the POPIA Notice.
What are cookies?
A "cookie" is a small text file that a website places on your device when you visit. The file is sent back to the website on subsequent visits, letting the site remember things like that you are signed in, or that you set the interface to dark mode.
We also use a small amount of local storage and session storage, which work similarly but are not transmitted with each request.
What we use cookies for
We group our cookies into two categories:
Strictly necessary
Cookies in this category are essential for the Service to function. They cannot be turned off through the cookie banner — switching them off would break sign-in.
| Name | Purpose | Lifetime |
|---|---|---|
ItsSuiite-Zilo | Session identifier — keeps you signed in across requests. | Browser session |
_csrf-frontend | Anti-CSRF token tying form submissions to your session. | Browser session |
cookie-consent | Remembers your choice on this banner so we don't show it again on every page. | 12 months |
Analytics (opt-in)
If you accept analytics cookies, we use them to understand how visitors interact with the marketing site — which pages people view, how they got here, where they leave. We use aggregated, anonymised data; we do not profile individual visitors and we do not sell the data.
The specific analytics platform is configured by the operator via the admin console and is currently:
- (not yet configured — see the status banner on the marketing site for which analytics platform is active)
Common platforms we may use (the operator picks one):
| Platform | Cookies set |
|---|---|
| Plausible | None (cookieless) |
| Google Analytics 4 | _ga, _ga_<container> |
| Mixpanel | mp_<token>_mixpanel |
When the operator changes the analytics platform, this section will update to list the cookies actually set.
What we do not use
- No advertising cookies.
- No third-party social tracking pixels (Facebook Pixel, LinkedIn Insight Tag) on the marketing site.
- No fingerprinting beyond what is necessary for fraud prevention.
Your choices
When you first land on the marketing site, you see a cookie banner with two buttons:
- Accept all — enables both categories above.
- Only essential — enables only strictly necessary cookies.
You can change your choice at any time by clicking Cookie settings in the footer of any marketing page.
You can also instruct your browser to refuse all cookies or to delete cookies after each visit — see your browser's help pages. Note that disabling strictly-necessary cookies will prevent you from signing in.
POPIA + GDPR
Where consent is required (analytics cookies), we obtain that consent via the banner. We use lawful-basis "legitimate interest" for the strictly-necessary category — see §3 of the Privacy Policy for the balancing-test summary.
Changes to this policy
We may update this policy from time to time. Material changes will be notified via the platform announcements system and on the legal page index. The version banner on this page records the effective date.
Contact
To raise a concern about cookies or our use of similar technologies, email legal@itssuite.com.
Initial template — please review with legal counsel before relying on this for compliance purposes.