Cookie Policy | Cookie Policy
Last Updated: 5 March 2026 | Version: 1.0
🍪 UK Cookie Law - PECR Compliance
This Cookie Policy explains how cookies are used on the haveai.io website operated by HaveAI Technologies Ltd (UK).
Legal Basis: UK Privacy and Electronic Communications Regulations (PECR) 2003 (amended 2011, 2015, 2018, 2020) and UK General Data Protection Regulation (UK GDPR)
This policy provides information about the cookies we use on our website, their purposes, and how you can manage your cookie preferences. ICO's cookie guide
1. What are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, phone) through your browser when you visit a website.
1.1. Cookie Usage Purposes
- Ensuring the website functions properly (session management, security)
- Improving user experience (remembering your preferences, language/theme selection)
- Analyzing website performance (which pages are popular, error detection)
- Providing personalized content and advertisements (ads relevant to your interests)
1.2. Types of Cookies
By Duration
- • Session Cookies: Deleted when the browser is closed
- • Persistent Cookies: Remain on the device for a specified period
By Source
- • First-Party Cookies: Cookies placed by HaveAI
- • Third-Party Cookies: Placed by third-party services
2. What Cookies Do We Use?
⚖️ UK PECR Regulation 6: Explicit user consent is required for all cookies except strictly necessary ones.
Strictly Necessary Cookies
✅ Always Active: These cookies are absolutely essential for the basic functions of the website and do not require consent under UK PECR Regulation 6(1).
Legal Basis: UK PECR Regulation 6(1) - Strictly necessary for service provision
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| haveai_session | Session management | First-party | 7 days |
| haveai_auth | Authentication token | First-party | 7 days |
| csrf_token | CSRF protection | First-party | Session |
| cookie_consent | Consent preferences | First-party | 12 months |
| next-auth.session-token | NextAuth.js auth session | First-party | 30 days |
Functional Cookies
⚙️ Optional: Provides a more personalized experience by remembering your preferences.
Legal Basis: UK PECR Regulation 6(4) - Requires explicit user consent
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| theme_preference | Dark/Light mode | First-party | 12 months |
| language_preference | Language selection (TR/EN/RU/UZ) | First-party | 12 months |
| dashboard_layout | Layout preferences | First-party | 6 months |
Analytics Cookies
📊 Optional: Helps us understand how the website is used. Data is processed anonymously/pseudonymized.
Legal Basis: UK PECR Regulation 6(4) + UK GDPR Article 6(1)(a) (Consent)
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| _ga | Google Analytics - Unique user ID | Third-party | 2 years |
| _ga_* | Google Analytics - Session tracking | Third-party | 2 years |
| haveai_analytics | Internal analytics - page views, clicks | First-party | 1 year |
Third-Party Provider: Google LLC (USA) - Google Analytics is configured with IP anonymization (anonymizeIP: true) to comply with UK GDPR. Data transfer mechanism: EU-US Data Privacy Framework + Google Ads Data Processing Terms.
Marketing/Advertising Cookies
🎯 Optional: Used to show you more relevant and personalized advertisements.
Legal Basis: UK PECR Regulation 6(4) + UK GDPR Article 6(1)(a) (Consent)
Automatic Advanced Matching: When you consent to marketing cookies, the Meta Pixel may hash (SHA-256) contact details you enter on our site — such as your email address or phone number — in your browser and share them with Meta to match visitors with Meta users, improve conversion measurement and enable remarketing. This only occurs after you accept marketing cookies.
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| _fbp | Facebook Pixel - Ad targeting, conversion tracking & advanced matching | Third-party | 3 months |
| _gcl_au | Google Ads - Conversion tracking | Third-party | 90 days |
Third-Party Providers:
- • Meta Platforms (Facebook/Instagram): USA - EU-US Data Privacy Framework
- • Google LLC (Google Ads): USA - EU-US Data Privacy Framework + Google Ads Controller-Controller Data Protection Terms
3. How to Manage Your Cookie Preferences
3.1. Cookie Banner
You can set your preferences through the cookie banner displayed on your first visit to our website:
- "Accept All": You consent to all cookie categories
- "Strictly Necessary Only": You accept only strictly necessary cookies
- "Customize": You can enable/disable each cookie category separately
⚙️ Changing Your Cookie Preferences:
You can change your cookie preferences at any time:
- Click on the "Cookie Settings" link at the bottom of the page
- The cookie banner will reopen and you can update your preferences
- Changes are applied immediately
🔒 Google Consent Mode v2 Compliance
Our website uses Google Consent Mode v2 technology.
- All tracking disabled by default: No analytics or marketing cookies are activated until you give consent
- Instant application: Google Tag Manager is notified as soon as you change your preferences
- Granular control: Each cookie category is controlled separately
- EU/UK compliant: Google's official GDPR compliance solution
3.2. Browser Settings
You can also manage or delete cookies directly from your browser:
Google Chrome
Settings → Privacy and Security → Cookies and other site data
Mozilla Firefox
Settings → Privacy & Security → Cookies and Site Data
Safari (macOS/iOS)
Preferences → Privacy → Manage Website Data
Microsoft Edge
Settings → Cookies and site permissions → Cookies and site data
⚠️ Warning: If you block all cookies, some features of the website may not function properly.
3.3. Third-Party Opt-Out
You can disable third-party advertiser cookies from the following links:
- Google Ads Opt-Out: adssettings.google.com
- Facebook Ads Preferences: facebook.com/ads/preferences
- Network Advertising Initiative (NAI): optout.networkadvertising.org
- Your Online Choices (EU): youronlinechoices.com
4. Protection of Your Personal Data
Personal data collected through cookies is processed under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
What Personal Data is Processed?
- • IP address (anonymized/pseudonymized)
- • Browser type and version
- • Operating system
- • Pages visited
- • Click behavior
- • Session duration
Your Rights
- • Right to withdraw consent
- • Right to access your data (UK GDPR Article 15)
- • Right to erasure (Article 17)
- • Right to object to processing (Article 21)
- • Right to complain to the ICO (Article 77)
📖 More Information
For comprehensive information about the processing of your personal data, please review our policies:
5. International Data Transfers
Some cookies are managed by third-party service providers and your data may be transferred outside the UK.
| Provider | Location | Transfer Mechanism |
|---|---|---|
| Google LLC (Analytics, Ads) | USA | EU-US Data Privacy Framework + Google Ads Data Processing Terms |
| Meta Platforms (Facebook Pixel) | USA | EU-US Data Privacy Framework + Meta Data Transfer Addendum |
| HaveAI (First-party cookies) | Germany (EU) | EEA (Adequacy Decision - no transfer safeguards needed) |
⚖️ UK GDPR Chapter V Compliance: All international data transfers are carried out in accordance with UK GDPR Chapter V requirements.
6. Changes to This Cookie Policy
HaveAI may update this Cookie Policy at any time.
- Minor changes will not be notified
- For significant changes, the cookie banner will be displayed again and your consent will be requested
- We recommend reviewing your preferences after changes
7. Contact
For questions about the cookie policy or the processing of your personal data:
- Data Controller:
- HaveAI Technologies Ltd
71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Company Number: 17193263 - Email:
- [email protected]
- General Inquiries:
- [email protected]
- Right to Lodge a Complaint with the ICO:
- Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, UK