1. What Are Cookies
Cookies are small text files placed on your device when you visit a website or use an app. They allow the service to recognise your device, remember preferences, and collect usage information.
We also use pixel tags, local storage, and session storage. All such technologies are covered by this policy.
2. How We Use Cookies
- To make the website and app function correctly
- To remember your preferences and settings
- To analyse platform usage so we can improve it
- To deliver relevant content and measure marketing effectiveness
- To record your consent choices for compliance purposes
3. Categories of Cookies
3.1 Strictly necessary
Required for the platform to function. No consent required.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| alva_session | Alva Health | Login session management | Session |
| alva_consent | Alva Health | Records cookie consent choice and version | 12 months |
| alva_csrf | Alva Health | CSRF protection | Session |
| stripe_sid | Stripe | Checkout session integrity | Session |
3.2 Analytics cookies (consent required)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| ph_* | PostHog | Product analytics and user behaviour | 12 months |
| _ga | Google Analytics | Traffic analysis | 24 months |
| _ga_* | Google Analytics | Session tracking | 24 months |
3.3 Marketing cookies (consent required)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta | Retargeting and conversion tracking | 90 days |
| _fbc | Meta | Click attribution | 90 days |
| _gcl_au | Google Ads | Conversion tracking | 90 days |
3.4 Functional cookies (consent required)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| alva_locale | Alva Health | Language preference | 12 months |
| alva_currency | Alva Health | Currency selection | 12 months |
4. Third-Party Cookies
Some cookies are set by third parties. Their policies apply:
- Stripe — stripe.com/privacy
- PostHog — posthog.com/privacy
- Google — policies.google.com/privacy
- Meta — facebook.com/policy/cookies
5. Future Tracking Technologies
We may in future use additional tracking technologies including but not limited to Microsoft Clarity (session recording), LinkedIn Insight Tag (B2B attribution), and other analytics or personalisation tools. This Cookie Policy will be updated before any new technology is activated, and where required by law, your consent will be re-requested.
6. Managing Your Preferences
6.1 Cookie consent banner
On first visit, our consent banner allows you to accept all, reject non-essential, or customise preferences.
6.2 Changing preferences
Update at any time via Cookie settings in our website footer.
6.3 Browser settings
- Chrome: Settings → Privacy and security → Cookies
- Safari: Preferences → Privacy
- Firefox: Settings → Privacy & Security → Cookies
- Edge: Settings → Cookies and site permissions
6.4 Opt-out links
- Google Analytics: tools.google.com/dlpage/gaoptout
- Meta: facebook.com/policies/cookies
7. Consent Withdrawal and Versioning
You may withdraw or change your cookie consent at any time via Cookie settings in the footer. Withdrawal applies from the point of withdrawal onwards and does not affect processing that occurred with your prior consent.
Each time you give or update cookie consent, we record: the date and time of consent, the version of this Cookie Policy in effect at the time, and the specific choices made. This consent record is stored in the alva_consent cookie and our consent management database.
Where we make material changes to our cookie use, we will reset your consent preferences and ask you to re-consent. The consent version ID in your alva_consent cookie will be updated to reflect the new policy version.
8. Updates to This Policy
We will update this policy when we add or change cookies. Material changes will be communicated via our consent management platform and your consent preferences will be re-requested where legally required.
9. Contact
Legal enquiries: legal@alva.health
Data protection / DPO: dpo@alva.health
General support: support@alva.health
Security issues: security@alva.health