Last Updated: February 2026

Cookie Policy

This Cookie Policy explains how Vermulst Group uses cookies and similar technologies on the vermulstgroup.com website and Digital Employees platform. This policy should be read together with our Privacy Policy.

Sections 1–2

Introduction & What Are Cookies

This Cookie Policy explains how Vermulst Group ("we," "us," "our") uses cookies and similar technologies on our website and Digital Employees platform.

What Are Cookies

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences and settings, understand how you use the site, improve your experience, and provide security features.

Types of Technology

We may use cookies (small text files stored by your browser), local storage (browser storage for larger data), session storage (temporary, cleared when you close your browser), and pixels/beacons (tiny images used to track page views, if applicable).

First-Party vs Third-Party

First-party cookies are set by vermulstgroup.com directly — we control these. Third-party cookies are set by external services (Google, analytics providers, etc.) and are governed by their respective privacy policies.

Why We Use Cookies

We use cookies for essential operations (authentication, security), functionality (remembering preferences and settings), performance (understanding usage to improve the platform), and security (detecting and preventing fraudulent activity).

Sections 3–4

Cookies We Use

We categorize cookies by purpose and legal basis. Strictly necessary cookies cannot be disabled. All other categories require consent or provide opt-out capability.

Strictly Necessary Cookies

Essential for the Services to function — cannot be disabled. Includes session_id (login session), csrf_token (security), auth_token (API authentication, 7 days), and cookie_consent (remembers your preferences, 12 months). Legal basis: GDPR Article 6(1)(b) — necessary for contract performance.

Functional Cookies

Remember your preferences and settings. Includes user_preferences (UI language, theme, layout — 12 months), recent_workspaces (recently accessed workspaces — 30 days), and timezone (accurate time displays — 12 months). Legal basis: GDPR Article 6(1)(f) — legitimate interests with opt-out capability.

Analytics & Performance Cookies

Help us understand how the Services are used. We prioritize privacy-focused analytics: anonymized IP addresses, no cross-site tracking, clear opt-out mechanisms. Current status: Analytics cookies are NOT currently deployed. This section will be updated if implemented. Legal basis: Consent — GDPR Article 6(1)(a).

Third-Party Cookies

We minimize third-party cookies. Authentication providers (Google, Microsoft) may set their own cookies if you log in via their services. Embedded content (Google Maps, YouTube) may set cookies — we configure embeds for maximum privacy (privacy-enhanced mode when available). Refer to their privacy policies for details.

Sections 5–6

Cookies We Do NOT Use & Managing Cookies

We explicitly do not use advertising, cross-site tracking, or social media tracking cookies. You have full control over cookie usage through our preference center and your browser settings.

Cookies We Do NOT Use

We explicitly do not use: advertising cookies (we don't show ads or retarget users), cross-site tracking cookies (we don't track you across the web), or social media tracking pixels (no Facebook Pixel, LinkedIn Insight Tag, etc.). Your privacy is our priority.

Cookie Preference Center

When you first visit our site, you'll see a cookie consent banner. You can Accept All, Reject Non-Essential (only strictly necessary cookies), or Customize specific categories. To change preferences later, click 'Cookie Settings' in the footer.

Browser Cookie Settings

Control cookies through your browser: Chrome (Settings → Privacy and security → Cookies), Firefox (Settings → Privacy & Security → Cookies), Safari (Preferences → Privacy → Cookies), Microsoft Edge (Settings → Cookies and site permissions). Each browser lets you manage exceptions per site.

Effect of Blocking & DNT

Blocking strictly necessary cookies may prevent login and core functionality. Blocking functional cookies means preferences won't be saved. Blocking analytics has no impact on functionality. We respect Do Not Track (DNT) browser signals — DNT enabled is treated as 'Reject Non-Essential' automatically.

Sections 7–8

Consent & Legal Basis

Cookie data that constitutes personal data is processed in compliance with the EU ePrivacy Directive, GDPR, and Brazil's LGPD.

EU ePrivacy Directive

Under the EU ePrivacy Directive (2002/58/EC): Strictly necessary cookies require no consent before placement. All other cookies require informed consent before placement. We implement a consent-first approach for non-essential cookies.

GDPR Compliance

Cookie data constituting personal data is processed per GDPR. Lawful basis: Consent or legitimate interests depending on cookie type. This policy provides required transparency information. You can exercise your rights and withdraw consent at any time (see Managing Cookies section).

Withdrawal of Consent

To withdraw cookie consent: Use our Cookie Preference Center, clear your browser cookies, enable 'Do Not Track' in your browser, or contact us at privacy@vermulstgroup.com. Withdrawal does not affect lawfulness of processing before withdrawal.

Mobile Applications

If we release mobile applications in the future: Similar data collection principles apply, mobile-specific identifiers (advertising ID) will not be used for tracking, and in-app cookie preferences will be provided. The same privacy-first approach extends to all platforms.

Sections 9–11

Cookie Retention & Policy Updates

We regularly review cookie retention periods and update this policy when cookies change, regulations evolve, or new technologies are implemented.

Cookie Retention Periods

Session cookies are deleted when you close your browser. Authentication cookies last 7 days (or when you log out). Functional cookies are retained for 12 months. Analytics cookies, if implemented, would have a maximum 13-month rolling retention. We regularly review and delete expired cookies.

Updates to This Policy

We may update this Cookie Policy when we add or remove cookies, cookie regulations change, or we implement new technologies. Material changes trigger a banner notification on your next visit. Minor updates are reflected in the 'Last Updated' date. Re-consent may be requested for significant changes.

Cookie Audit Log

We maintain a record of all cookies in use. Our cookie audit is reviewed regularly to ensure compliance and accuracy. Next scheduled audit occurs 6 months from launch. Any changes discovered during audits are reflected in updates to this policy.

Contact Us

Questions about our use of cookies? Privacy Team: privacy@vermulstgroup.com. General Inquiries: contact@vermulstgroup.com. Mailing Address: Vermulst Group, Brazil. We respond to all cookie-related inquiries within 30 days.

Sections 12–14

Legal Framework & Resources

This Cookie Policy complies with European and Brazilian data protection regulations. Document Version: 1.0. Available in English; Portuguese translation available upon request.

Legal Framework References

This Cookie Policy complies with: ePrivacy Directive 2002/58/EC (Cookie Law), General Data Protection Regulation (EU) 2016/679 (GDPR), Lei Geral de Proteção de Dados (LGPD, Brazil), and guidelines from the Brazilian National Data Protection Authority (ANPD) and relevant EU supervisory authorities.

Learn More About Cookies

All About Cookies: allaboutcookies.org — comprehensive cookie information. Your Online Choices (EU): youronlinechoices.eu — manage online advertising preferences. Brazilian ANPD: gov.br/anpd — official Brazilian regulatory guidance on data protection and cookies.

Related Policies

Privacy Policy — How we handle your personal data, including data collected via cookies. Terms of Service — Terms governing platform use. Both policies are available on our website and should be read together with this Cookie Policy for a complete understanding of our data practices.

Privacy Team Contact

Privacy Team: privacy@vermulstgroup.com. General Inquiries: contact@vermulstgroup.com. Mailing Address: Vermulst Group, Brazil. We are committed to transparent cookie practices and welcome any questions about how we use cookies on our platform.

Questions About Your Data Privacy?

Our team is here to help you understand how we protect your data. Book a discovery call to learn about our privacy-first approach to Digital Employees.

Prospect Smarter. Book Faster.

Get Started