Chaussée de Roodebeek 206, 1200 Woluwe-Saint-Lambert, Belgique
Entreprise / Ondernemingsnummer / Enterprise No.: 0844.731.626
TVA / BTW / VAT: BE 0844.731.626
E-mail: sct@sctwebcare360.com
Web: sctwebcare360.com
1. Scope
This Policy explains cookies, local storage, consent identifiers and service-worker/cache mechanisms used by SCT WebCare 360. It supplements the Privacy Policy.
2. Categories
- Necessary: session, security, CSRF, authentication, consent-choice and essential functionality. Strictly necessary technologies may be used without consent.
- Preferences: language and interface settings. They are not used for advertising unless separately disclosed and consented.
- Analytics: non-essential audience measurement, activated only after consent if such a tool is actually deployed.
- Marketing: advertising pixels and cross-site tracking, activated only after consent if actually deployed.
3. Technologies currently planned/used
| Name / technology | Category | Purpose | Target duration |
|---|---|---|---|
| PHP session cookie | Necessary | Authenticated session; HttpOnly, Secure on HTTPS, appropriate SameSite | Session / technical session duration |
| cookie_consent_id | Necessary | Remember and evidence cookie choices | Normally max. 6 months before renewed choice |
| trusted_device | Necessary / security | Remember a trusted device after stronger authentication | Up to 30 days |
| preferred-language (localStorage) | Preference | Remember interface language | Until changed/removed; limited to functional need |
| Service Worker / Cache Storage | Necessary technical PWA | PWA operation and public-resource caching | Technical rotation; private APIs/data must not be cached |
| Stripe Checkout / Customer Portal | External payment necessity | Fraud prevention, payment and customer portal on Stripe domain | According to applicable Stripe rules |
4. Consent
Non-essential cookies are used only after freely given, specific, informed and unambiguous consent. Rejecting must be as easy as accepting. Consent is not inferred from silence, continued browsing or general browser settings.
Choices can be withdrawn or changed at any time through Cookie Preferences. The preference should normally be remembered for no more than six months before asking again, in line with Belgian Data Protection Authority guidance.
5. Stripe and third parties
When a user enters Stripe Checkout or Customer Portal, Stripe may use its own cookies for security, fraud prevention and payment processing. Stripe technologies are also governed by Stripe’s information. The Platform does not intentionally load Stripe marketing cookies on its own pages without a lawful basis.
6. PWA cache and private data
The service worker must not cache authentication responses, private panels, private APIs, session data or non-public business content. After logout, the interface must promptly show the logged-out state.
7. Updates to the list
The actual list is reviewed whenever a new third-party tool is added. If analytics or marketing technologies are introduced, the banner, preferences and this Policy must be updated before activation.