1. What are cookies?
Cookies are small text files stored on your device by your browser when you visit a website. They allow the site to remember things about you — your language preference, whether you are logged in, whether you accepted the cookie banner — and to measure how visitors use the site. Similar technologies include pixels, beacons, LocalStorage, IndexedDB and SDK identifiers; we group all of them under the term "cookies" in this policy.
2. Our consent approach
Inside the European Union, United Kingdom and other jurisdictions with equivalent ePrivacy rules, we operate on an opt-in basis. On your first visit you see a cookie banner offering Accept all, Reject all and Customise. Only strictly necessary cookies load before you make a choice. Your consent is logged and renewed every 12 months, or earlier if our cookie inventory materially changes.
Outside the EU/UK we operate on a notice-and-choice basis: cookies load on first visit and you can opt out at any time using the Cookie Preferences link in the footer. We respect Global Privacy Control (GPC) and Do Not Track (DNT) browser signals where they are legally recognised.
3. Cookie categories
We use four categories. The first is always required; the other three are optional and controlled by your consent.
- Strictly necessary — required for the website to function. Cannot be switched off. Includes session management, consent storage and security.
- Analytics — anonymised statistics about how visitors use the site. Helps us improve content, navigation and performance.
- Marketing — measurement of advertising effectiveness and re-engagement of visitors who showed interest in our services. Includes Meta, Google, LinkedIn and HubSpot.
- Preferences — remembers your language, time zone and website look choices so the experience is consistent across visits.
4. The cookies we use
| Cookie | Category | Provider | Purpose | Retention |
|---|---|---|---|---|
gt_session | Strictly necessary | TravelTradeInsights (first-party) | Server-side session token; required for forms and security. | Session |
gt_consent | Strictly necessary | TravelTradeInsights (first-party) | Stores your cookie consent preferences. | 12 months |
__cf_bm | Strictly necessary | Cloudflare | Bot management and abuse prevention. | 30 minutes |
XSRF-TOKEN | Strictly necessary | TravelTradeInsights (first-party) | Cross-site request forgery protection on forms. | Session |
_ga | Analytics | Google Analytics | Distinguishes unique visitors; anonymised IP. | 13 months |
_ga_<ID> | Analytics | Google Analytics | Persists session state per property. | 13 months |
_gid | Analytics | Google Analytics | Distinguishes daily visitors. | 24 hours |
_fbp | Marketing | Meta (Facebook Pixel) | Measures conversions from Meta ads and supports re-engagement. | 3 months |
fr | Marketing | Meta | Ad delivery and measurement on Facebook/Instagram. | 3 months |
_gcl_au | Marketing | Google Ads | Conversion linker for Google Ads. | 90 days |
li_sugr | Marketing | LinkedIn Insight Tag | LinkedIn advertising measurement. | 90 days |
__hssc / __hstc | Marketing | HubSpot | HubSpot session/visitor tracking for customer follow-up system attribution. | 30 minutes / 13 months |
gt_lang | Preferences | TravelTradeInsights (first-party) | Stores your language preference (EN, AR, HI, ZH). | 12 months |
gt_tz | Preferences | TravelTradeInsights (first-party) | Stores your detected time zone for date/time display. | 12 months |
gt_theme | Preferences | TravelTradeInsights (first-party) | Stores light/dark mode choice. | 12 months |
Note: our booking page and WhatsApp Business set their own cookies when their widgets are loaded. We list these inside the live banner where they appear.
5. Non-cookie technologies
- Meta Conversionsconnection (server-side) — sends pseudonymised conversion events server-to-server to improve ad measurement. Subject to consent on the EU/UK side.
- Google Enhanced Conversions (server-side) — sends hashed (SHA-256) conversion data to Google Ads.
- LocalStorage — used for website look state (e.g. last-viewed case study, scroll-restore position). Stored only on your device, never sent to our servers.
- Fraud prevention fingerprint — a first-party hash of non-identifying browser characteristics, used to detect form spam and credential stuffing. Not used for advertising profiling.
6. How to opt out
6.1 Cookie Preferences (recommended)
Click Cookie Preferences in the website footer at any time. Toggle off analytics, marketing or preferences categories. Changes take effect immediately and are remembered for 12 months.
6.2 Browser controls
- Chrome: Settings → Privacy & security → Cookies and other site data.
- Safari: Settings → Privacy → Manage Website Data.
- Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Edge: Settings → Cookies and site permissions → Manage and delete cookies.
- Brave: Settings → Shields → Cookies.
6.3 Ad ecosystem opt-outs
- Google Ads: adssettings.google.com
- Meta: Account Centre → Ad preferences.
- Industry: youronlinechoices.com (EU), optout.aboutads.info (US/Canada).
7. Consequences of opting out
Disabling strictly necessary cookies will break login, forms and security features. Disabling analytics cookies means we cannot measure aggregate visitor behaviour for that visitor. Disabling marketing cookies means you may continue to see TravelTradeInsights ads, but they will not be measured for conversions. Disabling preference cookies means the site will not remember your language and time zone between visits.
8. International data transfers
Where consent is granted to analytics or marketing cookies, the associated data may be transferred to the United States (Google, Meta, HubSpot, LinkedIn) under EU SCCs, the EU-US Data Privacy Framework and equivalent UK and Swiss mechanisms. See our Privacy Policy for details.
9. Children
Our services target travel and tourism businesses, not consumers under 16. We do not knowingly use cookies to profile minors.
10. Changes
We may update this Cookie Policy as the cookie inventory or applicable law changes. The "Last updated" date at the top reflects the most recent revision. Material changes trigger a re-prompt of the consent banner.
11. Contact
Questions about cookies: privacy@traveltradeinsights.com. Data Protection Officer: dpo@traveltradeinsights.com.