Cookie Policy

Overview

This Cookie Policy explains how Sartori & Partners ("we", "us", "our") uses cookies and similar technologies on www.sartoriglobal.com (the "Site"). It should be read together with our Privacy Policy and our Terms & Conditions, which together describe how we handle your information and the terms applicable to the Site.

In short: we use a small number of strictly-necessary technologies to keep the Site secure and working, we remember your analytics choice on your own device, and we use privacy-first analytics (Google Analytics 4) only after you click Accept on our banner. We do not use any advertising, targeting, or cross-context behavioural cookies.

What cookies and similar technologies are

Cookies are small text files that a website asks your browser to store on your device. "Similar technologies" include things like local storage (a small store inside your browser that a site can read and write) and the scripts that perform an automated bot-protection challenge. Throughout this policy we use "cookies" as shorthand for all of these technologies.

Some of these technologies are essential for the Site to function and to stay secure. Others, such as analytics, are entirely optional and are only used if you give your consent.

The categories we use

We use two categories of technology, described below by their function. Both are summarised in the table further down, together with how long each one lasts.

1. Strictly-necessary and security technologies

These are required for the Site to load, to operate correctly, and to protect it and its users against abuse and fraud. They are used regardless of your analytics choice because the Site cannot function safely without them, and they do not require your consent. They include:

Security and integrity: technologies that help us deliver the Site securely, protect against malicious traffic, and operate a web application firewall. These are generally short-lived or session-based.
Bot-protection challenge: an automated challenge, together with a hidden form field, used on our forms to distinguish genuine visitors from automated bots and to silently reject suspected automated submissions. This is described here by its function only, and its tokens are short-lived (used only for the duration of a form interaction).
Consent memory (local storage): when you make a choice on our cookie banner, we store that choice in your browser's local storage so that we remember your preference and do not show you the banner again on every visit. This is a single preference value held on your own device; it persists until you change your choice or clear it, has no fixed expiry, and is not used to identify or track you.

Because these technologies are essential to the secure operation of the Site, they cannot be switched off through our banner. You can still block or delete them using your browser settings, but parts of the Site may then not work properly.

2. Analytics — Google Analytics 4 (consent-only)

To understand how the Site is used and to improve it, we use Google Analytics 4, a web analytics service provided by Google. Analytics is loaded only if you click "Accept" on our cookie banner.

We operate Google Consent Mode (v2). This means that, by default, analytics storage is denied: no Google Analytics cookies are set and the analytics scripts are not loaded until you affirmatively consent. We do not grant advertising-related consent at any time. When you accept analytics:

The Google Analytics 4 measurement script loads and may set Google's standard measurement cookies on your device. We do not set additional named analytics cookies of our own beyond Google's standard ones. Google's standard measurement cookies have durations set by Google (typically up to around 24 months for the main identifier, and shorter for others), and GA4 analytics data is retained according to the property's configured retention setting.
Your full IP address is not retained: we configure Google Analytics so that complete IP addresses are not stored, in line with Google Analytics 4's IP handling, which does not record or store full IP addresses.
We measure aggregate usage such as pages visited, time on the Site, referring pages, and certain conversion events — for example clicks on email, phone, or call-to-action links, and successful form submissions. These conversion events are sent to analytics only after you have consented.

Where you accept analytics, data is processed by Google as our analytics provider and may be processed in countries outside your own, including the United States. Where that happens, such transfers are made under appropriate safeguards, such as the Standard Contractual Clauses, as described in our Privacy Policy.

If you decline, none of the above happens: no Google Analytics scripts load, no Google Analytics cookies are set, and no analytics or conversion events are sent. Declining analytics does not break the Site — every page and form continues to work normally.

Google Analytics is the only third-party analytics tool we use, and it is the only named third-party vendor referenced in this policy.

No advertising or targeting cookies

We do not use advertising, marketing, retargeting, or cross-context behavioural advertising cookies, and we do not use cookies to build a profile of your interests or to show you advertisements on this or any other site. We do not sell or share personal information for cross-context behavioural advertising. Our analytics is configured for measurement only, with advertising features off.

The following table summarises the technologies we use, described by function, including how long each lasts:

Strictly-necessary / security — Purpose: securely deliver the Site, protect against malicious traffic and abuse, and operate a web application firewall. Storage / duration: short-lived / session-based. Consent required: No (essential). Set by: us.
Bot-protection challenge — Purpose: distinguish genuine visitors from automated bots on our forms and reject suspected bot submissions. Storage / duration: short-lived (only for the duration of a form interaction). Consent required: No (essential, security). Set by: us, via a bot-protection service (described by function only).
Consent memory (local storage) — Purpose: remember your cookie-banner choice on your device so the banner is not shown repeatedly. Storage / duration: persists locally in your browser until you change your choice or clear it (no fixed expiry). Consent required: No (essential, your own preference). Set by: us.
Analytics — Google Analytics 4 — Purpose: measure aggregate Site usage and conversion events to improve the Site; full IP addresses are not retained. Storage / duration: Google's standard measurement cookies, with durations set by Google (typically up to around 24 months for the main identifier, shorter for others); analytics data retained per the property's configured retention setting. Consent required: Yes (loaded only after you Accept; denied by default). Set by: Google, as our analytics provider.

When you first visit the Site, our banner lets you Accept or Decline analytics. Analytics is denied by default until you choose. Your choice is stored in your browser's local storage and applies to that browser on that device.

Withdrawing your consent is as easy as giving it. You can change your mind at any time:

Change your choice in one click: a "Cookie settings" link is available in the Site footer on every page. Selecting it reopens the consent banner so you can switch analytics on or off in one click, with no need to alter your browser settings. Declining there stops any further analytics loading and updates your stored preference immediately.
Browser controls (optional, supplementary): most browsers also let you block or delete cookies and local storage, either entirely or for specific sites. Refer to your browser's help pages for instructions. Blocking all storage may affect strictly-necessary functions and how the Site works.

Because the banner applies to every visitor and your choice is stored locally per browser, you may need to make your choice again on a different browser or device, or after clearing your browser data.

Do Not Track and Global Privacy Control

Our analytics is off by default and runs only after you affirmatively accept, and we honour the choice you make on our banner. We do not use cookies for cross-context behavioural advertising and do not sell or share personal information for that purpose, so in that respect there is nothing to opt out of. Even so, where your browser or extension sends a Global Privacy Control (GPC) or similar opt-out preference signal, we treat it as a valid request to opt out of any sale or sharing of personal information to the extent the CCPA/CPRA applies to you, and we keep our analytics in a measurement-only, advertising-features-off configuration consistent with that signal. Because there is no consensus industry standard for legacy "Do Not Track" (DNT) browser signals, we do not take separate action in response to DNT headers; the controls described above remain the way to manage analytics on this Site.

Governing law and your local rights

This Cookie Policy and your use of the Site are governed by the laws of the State of Wyoming, USA, without regard to conflict-of-laws rules. Nothing in this Policy limits any non-waivable right you have under the laws applicable to you: if you are in the European Economic Area, the United Kingdom, or California, you retain all rights granted by the EU GDPR, the UK GDPR, or the California Consumer Privacy Act as amended by the CPRA, respectively, and the cookie-consent standards of your jurisdiction apply to you notwithstanding the governing-law choice above. If you are elsewhere, your local mandatory data-protection and cookie-consent rules continue to apply to you. Where those laws conflict with this Policy, your local mandatory rights prevail.

Changes to this Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the technologies we use or in legal requirements. When we do, we will revise the "Last updated" date below and post the updated policy on this page. Material changes take effect when the revised policy is posted. We encourage you to review this page periodically.

More information and contact

For more detail on how we handle personal data, including the lawful bases for our processing, international transfers, data retention, and your rights, please see our Privacy Policy. For the terms governing your use of the Site, see our Terms & Conditions.

If you have any questions about this Cookie Policy or wish to exercise your data-protection rights, you can contact our designated data-protection channel at [email protected]. For general enquiries, please use our contact form.

Last updated: June 4, 2026.