Cookie Policy.

Privacy is a standard we apply to ourselves, not only something we advise clients about.

We collect as little information as reasonably possible, use third-party services only where they serve a clear purpose, and explain the technologies on which this site relies.

A tracker that avoids the word “cookie” is still a tracker. This policy therefore covers cookies, local storage, pixels, scripts and other technologies that store information on your device or allow information to be collected from it.

This policy applies to eshay-advisory.com and its subdomains.

It explains which cookies and similar technologies are used, their purpose, the parties involved, and how you can manage your choices.

It complements our Privacy Policy, which explains more broadly how we process personal data.

This policy does not apply to third-party websites reached through links on this site, or to client environments governed by separate contractual terms.

The following table describes the principal cookies and technologies currently used on this site.

Browser restrictions may shorten the effective lifetime of certain cookies. This inventory is reviewed whenever a technology is added, changed or removed.

Some technologies are required to provide a service that you request or to protect the integrity of the site.

They may be used to remember your privacy choice, protect a form submission, maintain a secure session or prevent abuse. They are not used for advertising or audience measurement.

These technologies are activated without consent only where they are genuinely necessary for the requested service or for its security.

Our contact form is protected by Google reCAPTCHA v3. We use it to reduce spam, fraudulent submissions and automated abuse.

reCAPTCHA v3 operates without presenting a challenge in most cases. It analyses technical and interaction signals and returns a risk score indicating whether an action is likely to be legitimate.

reCAPTCHA runs automatically when you open the contact form, in the same way as the session and form-security technologies described above — it is not held back behind a separate cookie choice, and accepting or refusing analytics cookies has no effect on it. This reflects its narrow purpose: protecting one form from abuse, with no advertising or measurement use.

When reCAPTCHA is used, information may be transmitted to Google. Depending on the device, browser and Google services already in use, this may include:

• IP address and technical request information;
• browser and device characteristics;
• the page and action being protected;
• interaction and timing signals;
• existing Google cookies or identifiers, where present.

We use the resulting score only to protect the form and decide how a submission should be handled. We do not use reCAPTCHA data for advertising or to build profiles of visitors.

reCAPTCHA is provided by Google and is subject to Google’s applicable privacy and service terms.

We use Google Analytics 4 to understand how visitors use the site and how it performs.

This helps us answer limited operational questions, such as:

• which pages are visited;
• how visitors move between pages;
• which broad sources bring visitors to the site;
• whether pages load and function as expected;
• which content is useful enough to be read.

Google Analytics is activated only after you consent to analytics cookies. Refusing analytics does not affect your access to the site.

Analytics data is used in aggregate to improve the site. We do not use it to make decisions about individual visitors.

Unless expressly stated otherwise in an updated version of this policy, we do not enable:

• advertising personalisation;
• remarketing audiences;
• Google Signals;
• User-ID tracking;
• cross-device advertising measurement;
• the enrichment of analytics data with client records.

Google controls the operation of the Analytics platform and may process data as described in its own privacy and data-processing documentation.

On your first visit, the cookie panel allows you to accept or refuse each optional category separately: analytics (Google Analytics) and contact-form security (Google reCAPTCHA).

Refusing must be as easy as accepting. Neither Google Analytics nor Google reCAPTCHA is activated before you make an affirmative choice for the relevant category. If you refuse the security category, the contact form cannot be submitted, since reCAPTCHA is how we protect it from abuse — you can still reach us by email or phone, listed on the Contact page.

You can change or withdraw your choice at any time using the Cookie settings link available in the footer.

Withdrawing consent prevents future analytics collection from this browser. It does not automatically delete information collected lawfully before consent was withdrawn.

Your consent preference is retained for six months. After that period, or after a material change to the technologies in use, we may ask you to choose again.

Browser controls

Your browser also allows you to view, block or delete cookies. Browser-level blocking may cause your consent preference to be forgotten, in which case the site may ask you again on a later visit.

• Chrome — Settings › Privacy and security › Third-party cookies
• Firefox — Settings › Privacy & Security › Cookies and Site Data
• Safari — Settings › Privacy › Manage Website Data
• Edge — Settings › Cookies and site permissions

• No advertising or retargeting cookies.
• No advertising network integrations.
• No Facebook Pixel or LinkedIn Insight Tag.
• No social-network tracking widgets.
• No behavioural advertising profiles.
• No device fingerprinting for marketing purposes.
• No data-broker or automated lead-enrichment integration.
• No sale, rental or exchange of information collected through this site.
• No content withheld because analytics consent was refused.
• No dark patterns: refusing optional analytics takes no more effort than accepting them.

Independently of cookies, our hosting infrastructure records technical logs when a request is made to the site.

These records may include:

• IP address;
• date and time of the request;
• resource requested;
• referring page;
• response status;
• browser or user-agent information.

Logs are used to operate the service, investigate faults, detect abuse and protect the availability and integrity of our systems. They are not used for advertising or cross-site tracking.

Operational logs are retained only for the period reasonably necessary for these purposes, unless a longer period is needed to investigate an incident, establish legal claims or comply with an obligation.

Further information about this processing is available in our Privacy Policy.

Eshay Advisory operates internationally, and the providers used on this site may process information from infrastructure located outside the European Economic Area.

In particular, Google may process information in countries outside the EEA in accordance with its applicable contractual and legal transfer mechanisms.

Where a restricted international transfer takes place, we require an appropriate transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another mechanism recognised by applicable data-protection law.

We also assess whether additional technical or organisational measures are appropriate in light of the service and the data involved.

We update this policy whenever the cookies, services or purposes described here materially change.

Where a change affects the scope or basis of your consent, we will ask you to make a new choice before activating the relevant technology.

The current version is 2.0, dated 2 July 2026.

Questions about this policy or the technologies used on this site can be sent to privacy@eshay-advisory.com .

You may also lodge a complaint with the competent data protection authority. In France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL).