1. Introduction
Norma ("we", "our", or "us") uses cookies, local storage, and similar tracking technologies on our compliance management platform. This Cookie Policy explains what these technologies are, how we use them, and your choices regarding their use.
This policy should be read in conjunction with our Privacy Policy, which provides comprehensive information about how we collect, use, and protect your personal data.
2. What technologies do we use?
We primarily use localStorage (browser local storage) and some cookies to store information on your device. These technologies help us provide you with a better experience.
Remembering your preferences and settings
Keeping you signed in to your account
Understanding how you use our platform (via Google Analytics)
Improving our services based on usage patterns
Storing your progress during onboarding
Maintaining language preferences
3. Types of storage we use
We categorise our storage technologies into three types based on their purpose and necessity.
Essential local storage
Stored in your browser's local storage and necessary for the platform to function properly.
Authentication token
Maintains your login state
User data
Stores your profile and account information
Language
Remembers your language preference (English/Portuguese)
Onboarding progress
Temporarily stores setup progress during account creation
Functional storage
Enables enhanced functionality and personalisation.
Document storage
Caches document data for faster loading
Settings preferences
Stores your platform preferences
Form progress
Temporarily saves form data to prevent loss
Dashboard layout
Remembers your customised dashboard settings
Analytics cookies (Google Analytics)
We use Google Analytics 4 to understand platform performance and user behaviour.
Page views
Tracks which pages are visited
User interactions
Measures feature usage and engagement
Performance metrics
Helps identify technical issues
Compliance events
Tracks compliance-related actions for improvement
Analytics configuration
Google Analytics cookies are configured with privacy-focused settings: IP anonymisation enabled, advertising features disabled, and 2-year expiry. We do not use advertising cookies or allow ad personalisation.
4. Third-party services
Some integrated services may use their own cookies and tracking technologies.
Google Analytics
Analyses usage patterns and improves our platform. Google may set cookies for analytics purposes.
Microsoft Azure
Single Sign-On authentication. Uses localStorage for session management.
Google SSO
Google Sign-In functionality. May set cookies for authentication purposes.
Stripe
Secure payment processing. May set cookies to prevent fraud and ensure payment security.
AWS CloudFront
Content delivery optimisation. May use cookies for load balancing and security.
5. Data storage lifespan
The table below summarises how long each type of stored data persists.
| Storage type | Duration | Purpose |
|---|
| localStorage (Authentication) | Until manually cleared | Keep you logged in across sessions |
| localStorage (Preferences) | Until manually cleared | Language and settings |
| localStorage (Onboarding) | Cleared after completion | Temporary setup progress |
| localStorage (Documents) | Until manually cleared | Document caching |
| Google Analytics cookies | 2 years | Usage analytics and tracking |
| SSO session data | Session-based | Single sign-on authentication |
6. Your data storage choices
You have several options for managing data storage. Most browsers allow you to control cookies and clear localStorage through their settings.
ChromeManage cookies and storage
SafariManage cookies and storage
EdgeManage cookies and storage
Important notice
Clearing localStorage or disabling cookies may prevent you from using certain features of our platform, including logging in to your account and accessing compliance management tools.
7. Data storage for specific features
Authentication
Secure tokens stored in localStorage maintain your session. Essential for platform security.
Dashboard
Widget layout and view settings stored in localStorage for a personalised experience.
Multi-language
Language preferences (English or Portuguese) stored to maintain your choice across sessions.
8. Updates to this policy
We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes we will update the effective date at the top and notify you through the platform or via email.
9. Contact us
If you have questions about our use of cookies or this Cookie Policy, please contact us.
Privacy Team
privacy@norma-compliance.com
Data Protection Officer
dpo@norma-compliance.com
Version 1.0PublicOwner: Privacy Team