Cookie policy
This site sets two cookies. Both are strictly necessary, neither tracks you, and there is no third-party cookie of any kind.
Awaiting legal review
This document describes how this business actually operates and is drafted against Indian law as it applies to a business-to-business reseller. It is not legal advice, and it has not yet been reviewed by the company's own adviser.
This document describes the site exactly as built. If analytics, a chat widget, an advertising pixel or any other third-party script is added later, this page must be updated and a consent mechanism added — none is needed today because nothing here requires consent.
To remove this notice once the document has been approved, open the page in the admin panel and delete this block.
Why there is no cookie banner
A consent banner exists to obtain permission for cookies that are not necessary — analytics, advertising, profiling. This site sets none of those, so there is nothing to ask permission for, and a banner would be theatre.
The two cookies below are strictly necessary: without them you could not sign in, and the site could not protect a form submission from being forged. Necessary cookies do not require consent under any framework we operate in, but you are entitled to know exactly what they are — so here they are.
The two cookies
- csrf_tokenTies a form submission to your browser, so another site cannot forge one
- csrf_token — lifetimeThe browser session
- ictlab_sessionKeeps you signed in. Set only when you sign in
- ictlab_session — lifetimeUntil you sign out or it expires
- Both — flagsHttpOnly, Secure, SameSite
- Both — contentsAn opaque random token. No name, email or account detail
`HttpOnly` means no script on the page can read the cookie, which is what stops a cross-site scripting bug from becoming an account takeover. `Secure` means it is only ever sent over HTTPS. `SameSite` means it is not sent when another site links to us.
Neither cookie contains anything about you. The session cookie holds a random token; the mapping from that token to an account exists only on our server, and the token itself is stored there as a hash.
Your enquiry basket is not a cookie
When you add products to an enquiry, the list is kept in your browser's local storage, not in a cookie. It never leaves your browser until you submit the enquiry, and it is not sent with ordinary page requests.
It holds only product codes and quantities. Clearing your browser's site data clears it. Because it is local to that browser, a basket built on your laptop does not appear on your phone.
When you do submit an enquiry, the server re-reads every product code from the catalogue and rebuilds the pricing itself — so nothing kept in your browser affects what you are quoted.
What this site does not use
- No analytics of any kind — no Google Analytics, no product analytics, no session recording, no heatmaps.
- No advertising or remarketing pixels, and no conversion tracking.
- No social media plug-ins, share widgets or embedded feeds.
- No third-party fonts, scripts or tag managers loaded from another domain.
- No cross-site tracking, device fingerprinting or profiling.
Managing cookies
Every browser lets you view, block and delete cookies, usually under privacy or site settings.
Blocking cookies for this site is entirely your choice, and most of it will still work: you can browse the catalogue, read every page, search, and build an enquiry basket. You will not be able to sign in, and you will not be able to submit a form, because the protection against forged submissions depends on the token cookie.
Signing out clears the session cookie immediately, and also revokes the session on our side — so a copy of the cookie taken beforehand stops working too.
A question about this document
If anything here is unclear, or conflicts with a quotation or agreement you already hold, tell us before you act on it. Where a signed agreement and this page disagree, the agreement governs.