Cookie Policy

Cookies are small text files a website stores in your browser. Similar technologies — like your browser's local or session storage — work in much the same way. They let a site remember things between pages or visits.

Some are strictly necessary for a site to work; others are optional and used for things like remembering a preference or understanding where visitors come from.

Not at the moment. The public ONZURA website uses only a single marketing-attribution cookie (and that only if you arrive from a campaign link), plus strictly necessary items. Because we don't run third-party advertising or analytics cookies in your browser, there is currently no cookie-consent banner.

If we add analytics or browser-based advertising technologies in future, we will introduce an appropriate consent mechanism before doing so, in line with applicable Indian law (including the Digital Personal Data Protection framework as its provisions come into force).

Marketing attribution (optional, first-party)

Name: onzura_attribution. If you arrive through one of our campaign links, we store the campaign details (such as utm_source, utm_medium, utm_campaign and a Facebook click identifier, fbclid), the landing page and referring site in this first-party cookie. It lets us connect an enquiry to the campaign it came from. It lasts about 90 days, is marked HttpOnly and SameSite=Lax, and is only sent over HTTPS in production. It is not set for visitors who don't arrive from a campaign link.

WhatsApp prompt (strictly necessary, functional)

We store one key in your browser's session storage so the floating WhatsApp prompt only appears once per browser-tab session instead of repeatedly. It clears when you close the tab and contains no personal information.

Sign-in sessions (strictly necessary)

Our private areas — the internal studio dashboard and the password-protected portfolio — use session cookies to keep an authorised user signed in. These are only set after signing in to those areas and are not used for general visitors to the public website.

We don't load third-party advertising or analytics cookies into your browser on the public site. Where we measure advertising, we use Meta's Conversions API, which works server-to-server rather than through a browser cookie (see the Privacy Policy, "Advertising and measurement").

If you follow a link to WhatsApp or another third-party service, that service may set its own cookies under its own policy, which we don't control.

You're always in control of cookies through your browser:

• Most browsers let you view, block or delete cookies in their privacy/settings menu
• Clearing cookies for this site will remove the attribution cookie; clearing site data also clears the session-storage key
• You can avoid the attribution cookie entirely by visiting the site directly rather than through a campaign link
• Blocking strictly necessary cookies may stop the private sign-in areas from working, but won't affect browsing the public site

Browser help pages for Chrome, Safari, Firefox and Edge all explain how to manage cookies for a specific site.

If we add or change the technologies we use, we'll update this page and revise the "last updated" date above.