Cookie Policy

Cookies are small text files placed on your device by a website. "Similar technologies" include local storage, session storage, IndexedDB, pixels/web beacons, SDKs in mobile apps, and device fingerprinting. In this Policy "cookies" covers all of these. First-party cookies are set by casia.africa. Third-party cookies are set by other domains (e.g. an analytics provider). Session cookies expire when you close your browser. Persistent cookies remain until they expire or you delete them.

2.1 Strictly necessary (always active — no consent required). Essential for the Platform to function securely and to remember your privacy choices. Cookie / key · Provider · Purpose · Type · Duration — casia_consent · Casia · Stores your cookie preferences and consent record (categories, timestamp, policy version, audit id) · HTTP cookie, Secure (on HTTPS), SameSite=Lax · 12 months. A mirror of the same record may be kept in localStorage under the key casia_consent for faster client reads; the HTTP cookie is the source of truth.

2.2 Functional / preferences (consent required). Remember choices you make to improve your experience. Disabling them means some features may not remember your settings. No functional cookies are set on the public marketing site today. If we enable theme memory, dismissed notices or support chat later, they will appear here and will load only after you allow Functional cookies.

2.3 Analytics / performance (consent required). Help us understand how the Platform is used so we can improve it. Analytics tags (for example Google Analytics 4 with Consent Mode v2) are not loaded unless you allow Analytics and Casia has configured a provider via environment settings. No analytics cookies are set on a cold visit or after Reject all. We do not use analytics cookies on pages or apps intended for children.

2.4 Marketing / advertising (consent required). Used to measure campaigns when a provider is configured (for example Meta Pixel). Marketing tags are not loaded unless you allow Marketing and Casia has configured a provider. We never use marketing cookies for children's products, and we do not allow third parties to use our Platform to build advertising profiles of children.

On the Platform: Click Cookie Settings in the footer at any time (or open /legal/terms#cookie-settings or any page with #cookie-settings) to review, accept or reject each category. Your choice is stored in the casia_consent cookie and, on casia.africa hosts, is set for Domain=.casia.africa so it can be honoured across subdomains. We will ask again after 12 months, or sooner if this Policy version (consent version) changes. Global Privacy Control (GPC): If your browser sends a GPC signal we treat it as a rejection of analytics and marketing cookies and do not show the first-visit banner. In your browser: You can block or delete cookies via browser settings — Chrome (https://support.google.com/chrome/answer/95647) · Firefox (https://support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop) · Safari (https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac) · Edge (https://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-6a5f-1e1c-2fd4-ab3a3b7e6a3d). Blocking strictly necessary cookies will prevent parts of the Platform from working, including remembering your choices.

When learner or patient-minor product routes ship (for example Casia Spark learner views and Casia Peyton), those contexts will use strictly necessary cookies only. No analytics, session-recording or marketing technologies will be offered or loaded there. Those routes are not published on the public marketing site yet; the consent layer already treats matching path patterns as necessary-only.

If we enable a third-party analytics or marketing provider after you consent, that provider may process data outside South Africa. Transfers are made in accordance with section 72 of POPIA and, where applicable, GDPR Chapter V (see our Privacy Policy). Each provider's own privacy policy governs its use of data. Until a provider is configured, no such third-party cookies are set.

We will update this Policy when our cookie use changes. Material changes bump the consent version, reset your stored consent and trigger the banner again. The version and date at the top of this page tell you when it last changed.

Information Officer: privacy@casia.africa. You may complain to the Information Regulator (South Africa): https://inforegulator.org.za. Casia Africa (Pty) Ltd. Tshwane, Gauteng, South Africa.