Cookie Policy
Effective Date: April 7, 2026 | Last Updated: April 7, 2026
DoSA Safety Enhancements Inc — DoSA Safety | dosasafety.com
1. Introduction
This Cookie Policy explains how DoSA Safety Enhancements Inc uses cookies and similar tracking technologies on dosasafety.com, our marketing landing pages, and campaign microsites (collectively, “Marketing Web Properties”). Read this alongside our Privacy Policy.
We use cookies to: operate our website and marketing pages, remember visitor preferences, measure marketing campaign performance, retarget industrial safety professionals with relevant advertising, and analyze user journeys from first visit to Platform signup. Cookies are not set inside the authenticated Platform application beyond strictly necessary session and security cookies.
2. What Are Cookies & Tracking Technologies?
- •Cookies: Small text files placed on your device, read back on future visits to maintain state or record activity
- •Pixels / web beacons: 1×1 transparent images embedded in pages or emails to register a visit or open event
- •JavaScript tags & SDKs: Third-party scripts (analytics, ad platforms, chat widgets) embedded in our pages
- •Local & Session Storage: Browser-based storage used for session persistence and UI preferences
- •UTM parameters: URL query strings that capture campaign source, medium, and term for attribution
- •Device fingerprinting (limited): Used only for security and fraud prevention on login flows — never for advertising
3. Where We Use Cookies
- •Public marketing website (dosasafety.com): Full range of cookie categories below
- •Marketing landing pages & campaign microsites: Analytics, conversion tracking, and marketing cookies (with consent)
- •Blog and safety resources section: Analytics and functional cookies
- •Email marketing campaigns: Open-tracking pixels and click-tracking links
- •Authenticated Platform (app.dosasafety.com): Strictly necessary and functional cookies only — no advertising or retargeting cookies
4. Cookie Categories
4.1 Strictly Necessary [No Consent Required]
Essential for website and Platform function. Cannot be disabled.
- •Session management and authentication tokens
- •CSRF / anti-forgery protection
- •Load balancer and CDN routing
- •Cookie consent preference storage
- •Security rate-limiting and bot-detection cookies
- •SSL/TLS certificate validation cookies
4.2 Functional / Preference [Consent Required: EU/UK/BR/CA/QC]
- •Language and regional preference storage
- •Live chat widget state (e.g., Intercom, HubSpot Chat, Drift)
- •Form auto-fill and return-visitor recognition (non-marketing)
- •Video player preferences for safety demo videos
- •Webinar registration status
4.3 Analytics & Performance [Consent Required: EU/UK/BR/CA/QC]
- •Google Analytics 4 (GA4): Aggregate traffic, page views, session duration, acquisition channels — IP anonymization enabled for EU/UK
- •HubSpot Analytics: Visit tracking tied to known contacts in our CRM
- •Hotjar [if used]: Session recordings and heatmaps on marketing/demo pages — PII masking enabled
- •Mixpanel / Amplitude [if used]: Marketing funnel and conversion analytics
- •Sentry / Datadog: Performance monitoring and error tracking (anonymized)
4.4 Marketing, Advertising & Retargeting [Explicit Consent Always Required]
Used to reach industrial safety professionals and EHS decision-makers across digital channels:
- •LinkedIn Insight Tag: B2B audience segmentation (EHS managers, HSE directors, operations leads), conversion tracking, retargeting visitors who viewed demo or pricing pages
- •Google Ads (gclid, _gcl_aw, _gcl_gs): Search ad conversion tracking, display retargeting, YouTube industrial safety content targeting
- •Meta Pixel (_fbp, _fbc): Conversion tracking, custom and lookalike audience creation for industrial sector targeting
- •HubSpot Ads tracking: Multi-touch attribution for inbound leads from paid campaigns
- •Bing / Microsoft Ads UET tag [if applicable]: Search ad conversion tracking
- •Rollworks / Demandbase / 6sense [if applicable]: Account-based marketing (ABM) for target enterprise accounts in oil & gas, construction, manufacturing, mining, utilities
4.5 Third-Party Embedded Content [Consent Recommended]
- •YouTube / Vimeo: embedded safety demo and product walkthrough videos
- •LinkedIn feed / post embeds on marketing pages
- •G2 / Capterra review widgets
- •Typeform or similar survey embeds for lead qualification
5. Cookie Inventory
| Cookie / Tag | Provider | Category | Purpose | Expiry |
|---|---|---|---|---|
| session_id | DoSA Safety Enhancements Inc | Necessary | User session management | Session |
| csrf_token | DoSA Safety Enhancements Inc | Necessary | CSRF protection | Session |
| cookie_consent | DoSA Safety Enhancements Inc | Necessary | Consent preference record | 12 months |
| hs_lang | DoSA Safety Enhancements Inc | Functional | Language preference | 12 months |
| intercom-* | Intercom | Functional | Live chat state | 9 months |
| _ga | Analytics | GA4 visitor ID | 24 months | |
| _ga_XXXX | Analytics | GA4 session counter | 24 months | |
| hubspotutk | HubSpot | Analytics | Visitor identity (CRM) | 180 days |
| __hstc | HubSpot | Analytics | Analytics session tracking | 180 days |
| _hjSession* | Hotjar | Analytics | Session recording | 30 min |
| _gcl_aw | Marketing | Ads conversion tracking | 90 days | |
| _gcl_gs | Marketing | Campaign attribution | 90 days | |
| li_sugr | Marketing | B2B audience targeting | 90 days | |
| UserMatchHistory | Marketing | LinkedIn retargeting | 30 days | |
| _fbp | Meta | Marketing | Meta Pixel conversion | 90 days |
| _fbc | Meta | Marketing | Meta click attribution | 90 days |
| uet_uid | Bing Ads | Marketing | Bing UET conversion | 13 months |
Full live inventory reviewed every 6 months and maintained at dosasafety.com/cookie-inventory.
6. Consent Mechanisms by Jurisdiction
6.1 EU / UK — GDPR / UK GDPR / ePrivacy
On first visit from EU/UK, our Consent Management Platform (CMP) displays a banner that:
- •Fires before any non-essential cookies are loaded
- •Requires an affirmative opt-in action — no pre-ticked boxes, no implied consent via scrolling
- •Presents 'Accept All,' 'Reject All,' and granular category-level controls with equal visual prominence
- •Links to this Cookie Policy and our Privacy Policy
- •Records the consent event: timestamp, choices, CMP version, and policy version for audit purposes
- •Re-presents consent after 12 months or upon material policy changes
6.2 California — CCPA / CPRA
A “Do Not Sell or Share My Personal Information” link is displayed in the footer for California visitors. We do not sell personal information. Marketing cookies that constitute “sharing” for cross-context behavioral advertising are disabled by default for California users until affirmative opt-in. Global Privacy Control (GPC) signals are honored as a valid opt-out.
6.3 Canada — PIPEDA / Law 25 (Québec)
Québec visitors receive a consent interface meeting Law 25 requirements: clear purpose disclosure before consent, granular control, no default opt-in for non-essential cookies, and a straightforward withdrawal mechanism.
6.4 Brazil — LGPD
Brazilian visitors are presented with a consent banner meeting LGPD requirements: express consent for analytics and marketing cookies, purpose specification, and easy withdrawal.
6.5 Withdrawing or Updating Consent
Update your preferences at any time via the Cookie Settings link in our website footer or the cookie icon visible on any page. Withdrawal takes effect prospectively.
7. Industrial Sector Advertising Targeting
We use cookies and platform-side audience data to reach EHS decision-makers in high-risk industrial sectors including oil & gas, construction, manufacturing, mining, utilities, chemical processing, maritime, forestry, and logistics. Targeting parameters include:
- •Job title targeting: EHS Manager, HSE Director, Safety Officer, Operations Manager, Compliance Director, Risk Manager
- •Industry vertical targeting on LinkedIn and Meta (NAICS/SIC codes for target industries)
- •Account-Based Marketing (ABM): IP-based company identification to serve ads to employees of target enterprise accounts
- •Retargeting: visitors who viewed demo, pricing, ROI calculator, or case study pages
- •Lookalike audiences: built from anonymized first-party data of existing Customers in target sectors
All advertising targeting is conducted at the professional/B2B level and does not involve the use of worker safety records or incident data from the Platform for any advertising purpose.
8. Browser & Device Controls
- •Chrome: Settings → Privacy and Security → Cookies and other site data
- •Firefox: Options → Privacy & Security → Cookies and Site Data
- •Safari: Preferences → Privacy → Manage Website Data
- •Edge: Settings → Cookies and site permissions
- •iOS: Settings → Safari → Privacy & Security
- •Android: Chrome → Settings → Site settings → Cookies
Analytics opt-outs: GA4 — Google Analytics Opt-Out Add-on (tools.google.com/dlpage/gaoptout).
Advertising opt-outs: NAI (optout.networkadvertising.org) · YourAdChoices (optout.aboutads.info) · Your Online Choices EU (youronlinechoices.eu) · DAA Canada (youradchoices.ca) · LinkedIn Ad Preferences (linkedin.com/psettings/advertising).
9. Do Not Track (DNT) & Global Privacy Control (GPC)
GPC: We honor Global Privacy Control signals as a valid opt-out of the sale or sharing of personal information under CCPA/CPRA and applicable state law. GPC signals are processed by our CMP automatically.
DNT: No universally recognized DNT standard exists. We do not currently alter cookie behavior in response to DNT signals beyond what is covered by GPC and our consent banner.
10. Cookies in Email Campaigns
Our marketing emails may contain: (a) open-tracking pixels that register when an email is opened; (b) click-tracking links that redirect through our servers before reaching the destination. You may disable image loading in your email client to prevent open tracking. Click-through tracking can be opted out of by unsubscribing from marketing emails via the unsubscribe link in every email.
11. Updates to This Cookie Policy
We review this Policy at minimum every 6 months and update it when we add, remove, or change cookies or tracking technologies, or as laws evolve. Material changes will be communicated via our CMP consent banner and email notification to known contacts.
12. Contact
- •Cookie & tracking inquiries: privacy@dosasafety.com
- •Mailing: 2215 Independence Dr, Suite 6101, New Braunfels, TX 78132, United States