This Cookie Policy is issued by ZOLA CS DMCC, Unit No. 278, DMCC Business Centre, Level No. 1, Jewellery & Gemplex 3, Dubai, United Arab Emirates ("Zola", "we", "us"). It explains which cookies our marketing website (zolagroup.com) and our platform app (app.zolagroup.com) use, why, and how you can control them. It is a standalone policy, published at zolagroup.com/cookies, and should be read together with the Zola Privacy Policy (zolagroup.com/privacy).
In plain terms: Our marketing website (zolagroup.com) uses Google Analytics cookies so we can understand how visitors use the site — you can block or delete them without losing anything. The platform app (app.zolagroup.com) sets only the cookies needed to keep you signed in and secure. We do not use advertising or marketing cookies anywhere; if we ever add any, we will update this policy and ask for your consent first. (This summary is for convenience only and is not part of this Policy.)
1. What Cookies Are
Cookies are small text files that a website stores on your device to remember information between visits, such as the fact that you are signed in. Similar technologies, like local storage, serve the same purpose, and we use the word "cookies" to cover them all.
2. The Cookies We Use
We run two web properties, and they use different cookies: the platform app (app.zolagroup.com), where you sign in and manage your services, and the marketing website (zolagroup.com).
(a) The platform app — strictly necessary cookies only. Every cookie set on the platform app is strictly necessary — the app cannot work without it. The platform app sets no analytics, advertising, or other non-essential cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| Authentication (refresh-token) cookie | Keeps you signed in to your Zola account between visits and lets us renew your session securely. It is marked HttpOnly (so scripts running in the page cannot read it) and Secure (so it is only ever sent over encrypted connections). | Persistent; up to 30 days, or until you sign out. |
| Back-office session cookie | Maintains the signed-in session of authorized Zola staff in our internal administration console. It is never set for clients on the customer-facing platform. | Session; deleted when the browser is closed. |
| Load-balancing and security cookies | May be set by our hosting and security infrastructure to route your requests to the right server and to protect the platform against automated attacks and abuse. | Session, or short-lived. |
(b) The marketing website — Google Analytics cookies. In addition to any strictly necessary cookies, the marketing website uses Google Analytics 4 (loaded via Google's gtag.js, measurement ID G-CFFVNVTHZL) to give us visitor statistics and help us improve the site. These cookies send information about your visit to Google, our analytics provider. You can block or delete them at any time without losing any functionality — see Sections 6 and 7.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google (Google Analytics 4) | Distinguishes individual visitors so we can compile aggregated statistics about how the website is used. | Approximately 2 years. |
_ga_* (e.g. _ga_CFFVNVTHZL) |
Google (Google Analytics 4) | Keeps track of session state for analytics. | Typically about 2 years; session-scoped entries expire after about 24 hours. |
3. What We Do Not Use
We do not use advertising or marketing cookies, social-media cookies, or data-broker cookies anywhere — on the marketing website or the platform app. No advertising network or data broker receives information about your visit through cookies we set. The platform app uses no analytics cookies at all; the only analytics cookies we use are the Google Analytics cookies on the marketing website, described in Section 2.
4. The Embedded Chat Widget
If you reach Zola through our chat widget embedded on another website, the widget runs inside its own frame and communicates with that site through standard iframe messaging. It does not set tracking cookies on the host site, and it does not read the host site's cookies.
5. Stripe Checkout Pages
When you pay by card, you are taken to a checkout page hosted by Stripe, our card payment processor. Pages hosted by Stripe set Stripe's own cookies, which are governed by Stripe's cookie and privacy policies, not this one. We do not control those cookies; you can review Stripe's policies on Stripe's website before paying.
6. Analytics Cookies and Future Changes
The marketing website currently uses Google Analytics 4 cookies, as described in Section 2, to give us aggregated statistics about website visits; Google is the provider and receives the data. You do not have to accept these cookies: you can block or delete them through your browser's cookie settings, or stop your data being sent to Google Analytics on any site by installing the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout). Section 7 explains how.
If we ever introduce advertising, marketing, or other non-essential cookies beyond those disclosed in Section 2 — including any non-essential cookie on the platform app — we will update this Cookie Policy and ask for your consent (for example, through a consent banner) before any such cookie is set.
7. How to Control Cookies
Most browsers let you view, block, and delete cookies through their settings; the help pages for Chrome, Safari, Firefox, and Edge explain how. You can also browse in private or incognito mode, which discards cookies when you close the window. What blocking or deleting means for you depends on which of our cookies are involved:
- Analytics cookies (marketing website). You can block or delete the Google Analytics cookies at any time with no loss of functionality — your account and sign-in are not affected. Use your browser's cookie settings, or install the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).
- Strictly necessary cookies (platform app). Because these cookies are strictly necessary, blocking or deleting them will break sign-in — you will be logged out and will not be able to stay signed in to your account.
Deleting cookies does not delete your account or your data; for that, see the account-deletion section of the Privacy Policy.
8. Contact and Related Documents
Questions about this Cookie Policy or our use of cookies: use the contact form at zolagroup.com/contact.
For everything else we do with your personal data — what we collect, why, who receives it, how long we keep it, and your rights under UAE data protection law — please read the Zola Privacy Policy (zolagroup.com/privacy), which complements this Cookie Policy and should be read together with it.
We will post any updates to this policy on this page with a new version number and effective date.