Cookie Policy

1. What cookies and similar technologies are

Cookies are small text files placed on your device by a website. Similar technologies include browser local storage and session storage, which keep information inside your browser rather than sending it with every request, and software development kits or pixels used by some third parties. This Policy covers all of these, referred to together as “cookies and similar technologies”.

The law we apply - the EU ePrivacy rules and comparable Georgian requirements, read together with data-protection law - permits storing or reading information on your device without consent only where it is strictly necessary to provide a service you have requested. Anything that is not strictly necessary requires your consent.

2. Strictly necessary cookies and storage

Session cookie: a cryptographically signed cookie that keeps you securely signed in to the client portal or staff workspace. It is essential for authentication and is removed when you sign out or when it expires. Typical lifetime: the duration of your session, up to its expiry.

Language preference: a cookie and/or local-storage value that remembers your chosen language (for example, English or Russian) so pages render consistently. Typical lifetime: up to 12 months, or until you clear it.

Draft storage: in-progress application drafts are kept in your browser’s local storage so you do not lose work between visits. This data stays on your device until you clear it or complete the application.

Security and integrity: values used to protect against fraud and abuse and to maintain the correct operation of forms and the Platform. Legal basis: strictly necessary; these cannot be switched off while using the signed-in areas of the Platform, and they do not track you across other websites.

3. Analytics

Where analytics is enabled, Trustlex uses a privacy-friendly, cookieless analytics service that records aggregated page views and conversion events (for example, that an application was submitted) without cookies, without cross-site tracking, and without collecting personal identifiers. Because it does not store or read information on your device beyond what is strictly necessary and does not identify you, it operates on the basis of our legitimate interest in understanding and improving the Platform.

Trustlex also uses Google Analytics 4, provided by Google Ireland Limited, to measure how the Platform is found and used. Unlike the service described above, Google Analytics sets cookies on your device (typically named _ga and _ga_*, lasting up to two years) and processes your truncated IP address, approximate location derived from it, device and browser type, and the pages you view. It is therefore switched off until you accept it, and switched off more completely than a consent banner usually manages: the Google Analytics tag is not loaded at all unless you choose Accept, so before that there is no Google script on the page, nothing is set and nothing is read. If you do accept, the tag loads and begins collecting from that point. Our legal basis is your consent, which you may withdraw at any time as described in section 5. Google Signals is switched off, so your visit is not combined with signed-in Google accounts for cross-device or demographic reporting. Because the same acceptance covers advertising cookies, Google's advertising consent settings (ad storage, ad user data and ad personalisation) are granted together with analytics, which lets us measure whether a Google advertisement led to an enquiry; if you decline, all of them stay denied. Google may process this data outside Georgia and the EEA, including in the United States, under the safeguards described in our Privacy Policy.

Trustlex also uses two advertising tags for its paid campaigns: the Meta Pixel, provided by Meta Platforms Ireland Limited, and the LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company. Like Google Analytics, neither is loaded until you choose Accept; before that there is no Meta or LinkedIn script on the page. Once loaded, the Meta Pixel sets cookies on this site named _fbp and, after you arrive from a Meta advertisement, _fbc (each lasting up to 90 days) and, if you are signed in to Facebook or Instagram, may read Meta's own cookies from its domain; the LinkedIn Insight Tag sets a cookie named li_fat_id on this site (lasting up to 30 days) and cookies on LinkedIn's domain, including li_sugr, bcookie and UserMatchHistory (lasting up to 12 months). Both receive technical data about the visit - the page viewed, the referring page, your browser and device type, and your IP address as part of the request - which each provider may link to an account you hold with it. We use them for two purposes only: to measure which advertisements led to a visit or an enquiry, and to build audiences of people who visited the Platform so that we can show them relevant advertisements on those platforms. Trustlex does not send them your name, email address, documents, or anything you type into a form; the events they receive say that an enquiry or application happened, not who made it. Our legal basis is your consent, which you may withdraw at any time as described in section 5. Meta and LinkedIn may process this data outside Georgia and the EEA, including in the United States, under standard contractual clauses and the safeguards described in our Privacy Policy. No session-replay tools that capture your input, and no third-party trackers other than those named in this section, are used.

4. Third-party services

Clicking a WhatsApp or Telegram contact button opens those services, which apply their own cookie and privacy practices from the moment you leave the Platform. Payment providers, where used, apply their own cookies on their own payment pages. These are controlled by the respective providers, not by Trustlex; we recommend reviewing their policies.

5. Consent and how to control cookies

Strictly necessary storage and the cookieless analytics service require no consent, because they set nothing on your device beyond what is needed to operate the Platform. Analytics and advertising cookies do require consent, and none of them is activated until you give it. When they are enabled on the Platform you will see a banner offering Accept and Decline before any analytics or advertising cookie is set; Accept covers Google Analytics, the Meta Pixel and the LinkedIn Insight Tag together. If you decline, none of their scripts is loaded, no such cookie is written, and the Platform behaves identically in every other respect.

To change your mind later, clear this site’s data in your browser (or delete the trustlex_analytics_consent entry in local storage) and the choice will be put to you again. Withdrawing consent stops collection from that point: cookies already set on this site by Google, Meta or LinkedIn are removed when you clear this site’s data, and the cookies LinkedIn keeps on linkedin.com when you clear that site’s data or all cookies in your browser. Declining is remembered in the same way as accepting, so it is not undone by your next visit.

You can delete or block cookies and clear local storage at any time through your browser settings, and most browsers let you refuse or receive a warning before cookies are stored. Blocking the session cookie will prevent you from signing in; clearing local storage will remove saved drafts and your language preference. We honour browser-level opt-out signals where legally required.

6. Changes and contact

If we introduce new cookie categories or vendors, this Policy will be updated and the “Last updated” date revised before the change takes effect. Questions about this Policy can be sent through the contact options on the Platform. The English text is the governing version; translations are provided for convenience only.