OVERVIEW OF TRACEABLE RISK MONITORING

Traceable Risk Monitoring’s solution offering includes the marketing and distribution of risk mitigating enablers such as tamper evident bags, security seals, security labels, and security tapes, to ensure monitoring and traceability throughout the supply chain.

INTRODUCTION

TRM values privacy. This cookie policy applies to the website that is authorized by Traceable Risk Monitoring e.g. www.trisk.co.za . This cookie notice is available on TRMs website.

WHAT IS A COOKIE

A cookie is a small piece of data that is sent (usually in the form of a text file) from a website to the user’s device, such as a computer, smartphone or tablet. The purpose of a cookie is to provide a reliable mechanism to “remember” user behaviour and/or stateful information (i.e. information which enables the site to keep track of previous actions), e.g. remembering the contents of an online shopping cart, and actions the user performed
whilst browsing when not signed up or logged into their online account.

Traceable Risk Monitoring does not necessarily know the identity of the user of the device but does see the behaviour recorded on the device. Multiple users of the same device would not necessarily be distinguishable from one another. Cookies could, however, be used to identify the device and, if the device is linked to a specific user, the user would also be identifiable.

WHICH COOKIES CAN BE FOUND ON TRM’s WEBSITE

First- and third-party cookies refer to the website or domain using the cookie. Cookies are set by the website that the user is visiting.

First-party cookies are directly stored by the website (or domain) visited by a user. These cookies allow website owners to collect analytics, data, remember language settings or perform other useful functions that provide a good user experience.

Third-party cookies are also set by the website visited but are sent when the user visits the third-party site. Third-party cookies are created by domains separate/different from the website (or domain) that the user is visiting. These cookies are usually used for online advertising, cross-site tracking; and are accessible on any website that loads the third party’s server code, e.g. when a user visits a site and clicks a “like” button, this could be
stored in a cookie and, upon visiting the third-party site, the cookie will be used to action the request.

Another example is when a user browses online for a specific product, finds an advert of interest, clicks the advert and thereafter closes their browser. Several hours later, the user notices advertising of the same product that they were browsing for earlier.

When a user visits Traceable Risk Monitoring’s website, Traceable Risk Monitoring may include any of the cookies listed in the table below. The table explains what the cookies are used for and the period for which the cookie could remain valid. Where cookies are only valid for a single session, the cookie will be erased when the user closes their browser. Where cookies persist, the cookie will be stored by the user’s browser until deleted by the user.

Types of cookies are outlined in the table below.

Origin	Use	Service	Duration
First-party cookies	Browser/device identification	Enable TRM to identify the device/browser.	Persist beyond a single session.
Authentication	Upon logging into a web server, a cookie will be returned that identifies the user has been successfully logged in.	Only valid for the single session.
First- and third-party cookies	Analytics	To collect information about how visitors use TRMs website. This can provide TRM with insight on website performance and metrics.	Persist beyond a single session.
Third-party cookies	Marketing and other	Used for tracking and online advertising and marketing purposes.	Persist beyond a single session.

Other terms relevant to cookies usage are outlined in the following table.

Option	Description
HTTPONLY	Makes the cookie secure by ensuring the cookie is only sent over HTTP protocol. HTTP here only refers to the protocol and communicates clear text as http or https over an encrypted channel. This prevents attackers from secretly extracting it.
Same-site cookie	Makes the cookie secure by limiting the sites to which the cookie is allowed to be sent.
Expiry	Sets the duration a cookie will last for before it expires.
Secure	Makes a cookie secure by ensuring it is only sent over a securely encrypted channel.
Path	Helps to protect a cookie by restricting the location where it is allowed to be sent.

WHEN WILL TRM USE COOKIES?

Traceable Risk Monitoring will only process cookies which identify users for lawful purposes:

• if a user has consented thereto; if a person legally authorised by the user, the law or a court, has consented thereto on the user’s behalf;
• if it is necessary to conclude or perform under a contract that TRM has with the user;
• if the law requires or permits it;
• if it is required to protect or pursue the user’s, TRM’s or a third party’s legitimate interest (e.g. for fraud prevention); or
• if the user is a child and a competent person (like a parent) has consented thereto on the child’s behalf.

TRM may use cookies for reasons including but not limited to:

• various analytical reasons, e.g. how TRMs website is used so that improvements can be made, such as when users click on an advert for a specific product, the number of users interested in such product can be noted;
• marketing and advertising, for example to decide which products users may be interested in and to customise marketing on various applications and websites, such as when a user clicks on an advert for a seal on the TRM website and such a user interacts with the TRM page, TRM will be able to identify that the user is interested in a seal and the user will therefore be shown more seals advertisements; and/or recognition of users of the TRM website, or devices which return to TRMs website.

WHAT HAPPENS IF A USER DOES NOT WANT COOKIES

All browsers allow users to refuse to accept cookies and to remove current cookies. The methods for doing so vary between different browsers and versions. Users can block cookies on TRMs website, if desired.

HOW CAN COOKIES BE MANAGED

For the sake of convenience on TRMs site (e.g. www.trisk.co.za), a user may self-manage certain cookie preferences (permissions on how TRM may use cookies) which means users have the choice to disable first- and third-party cookie collection. Should the option be available, users can locate cookie preferences under the legal section of the relevant site.

FURTHER INFORMATION ABOUT COOKIES

• Users’ browsers store cookies and TRMs website cannot access any data on a user’s device.
• As cookies are stored in text files, they cannot be used to distribute viruses to a device.
• On a single device with multiple users the experience of TRMs website would be customised based on the behaviour of all users using the device and not just an individual user.
• If users disable cookies, previous cookies collected will not be deleted, however, this will prevent the creation of new cookies. Expired cookies will be removed automatically.
• A user may delete historically collected cookies via the browser.