How we use cookies and similar technologies on our website.
On this page
This Cookie Policy explains what cookies and similar technologies are, how Vigilant Risk Manager Ltd ("VigilantGRC", "we", "us") uses them on our website (vigilantgrc.com) and our risk management platform, and how you can control or disable them.
This policy is supplementary to our Privacy Policy and should be read alongside it. Our use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR. Where cookies involve processing personal data, the legal basis is set out in our Privacy Policy.
Cookies are small text files that a website saves to your browser when you visit. They allow the website to remember information about your visit — for example, that you have logged in, or that you agreed to our cookie policy — making your next visit easier and the site more useful to you.
Alongside traditional cookies, we may also use similar technologies such as:
Cookies can be session cookies (deleted when you close your browser) or persistent cookies (which remain on your device until they expire or you delete them). They can be set by us (first-party cookies) or by third-party services embedded in our pages (third-party cookies).
We use cookies for the following reasons:
These cookies are essential for you to access the website and use its features. They do not require your consent under PECR because they are technically necessary. They cannot be disabled through our cookie banner.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
_vsid | VigilantGRC (first-party) | Maintains your authenticated session state so you remain logged in as you navigate between pages | Session |
_vcsrf | VigilantGRC (first-party) | Generates and validates security tokens to protect against cross-site request forgery attacks on all forms | Session |
cookie_consent | VigilantGRC (first-party) | Records your cookie consent choices so we do not display the consent banner on subsequent visits | 12 months |
vrm_auth | VigilantGRC (first-party) | Securely identifies authenticated Platform users; contains an encrypted reference only, not personal data directly | Session / 30 days (if "remember me" selected) |
These cookies collect information about how you use our website — for example, which pages you visit most often and whether you encounter error messages. All information collected is aggregated and therefore anonymous. We use it to improve how our website works. We rely on your consent (PECR Reg. 6) to set these cookies; you may withdraw consent at any time via our cookie settings.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics (GA4) | Registers a unique ID to distinguish users and generate statistical reports on website use | 2 years |
_ga_[ID] | Google Analytics (GA4) | Persists session-level data for the Google Analytics session | 2 years |
_gid | Google Analytics (GA4) | Registers a unique ID to distinguish users — refreshed every 24 hours | 24 hours |
_gat | Google Analytics | Throttles request rate to Google Analytics (prevents excessive data collection) | 1 minute |
We have configured Google Analytics to anonymise IP addresses before data is transmitted to Google. We do not use Google Analytics' advertising features, audience sharing, or cross-device tracking.
These cookies allow the website to provide enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages. If you do not consent to these cookies, some functionality may not work as intended.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
vrm_region | VigilantGRC (first-party) | Remembers your preferred content region or language selection so you do not need to re-select it on each visit | 6 months |
vrm_demo_viewed | VigilantGRC (first-party) | Records that you have already seen the product demo prompt so it is not displayed repeatedly | 30 days |
intercom-* | Intercom (third-party) | Powers our in-product live chat and support widget; identifies returning visitors to show conversation history | 9 months |
These cookies are used to deliver advertising messages relevant to you and your interests, and to measure the effectiveness of our marketing campaigns. They are set only if you provide explicit consent via our cookie banner. Withdrawing consent will not affect any advertising you see, but it will mean we cannot attribute campaign conversions to specific ad clicks.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
_fbp | Meta (Facebook/Instagram) | Used by Facebook to deliver a series of advertisement products; tracks visits across websites that use Meta Pixel | 3 months |
li_fat_id | LinkedIn Insight Tag — measures campaign conversions and enables demographic reporting about visitors from LinkedIn ads | 30 days | |
_gcl_au | Google Ads | Used by Google Ads to measure the effectiveness of advertising and to store and track conversions from Google Ads | 3 months |
Some pages on our website may include embedded content from third-party platforms — for example, video demonstrations hosted on Wistia or Vimeo, webinar registrations, or embedded maps. These third parties may set their own cookies when you interact with their content. We have no control over these cookies and they are not covered by this policy. We recommend reviewing the privacy and cookie policies of those third parties directly.
We carry out due diligence on third-party providers before embedding their content and avoid embedding services that set tracking cookies without consent.
When you first visit our website, a cookie consent banner is displayed. You may:
Your choices are stored in the cookie_consent cookie for 12 months, after which we will ask for your preferences again. You may change your preferences at any time by clicking the "Cookie settings" link in the footer of any page. Withdrawing consent does not affect the lawfulness of any cookie-setting that occurred before withdrawal.
We do not treat pre-ticked boxes, silence, or continued browsing as consent for non-essential cookies. Consent is recorded with a timestamp and the version of the policy in force at the time.
In addition to our cookie consent tool, most browsers allow you to manage cookies through their settings. You can typically choose to delete existing cookies, block future cookies, or be notified before a cookie is set. Please note that restricting cookies may affect the functionality of our website and Platform, including your ability to log in.
To opt out of Google Analytics tracking across all websites, you can install the Google Analytics Opt-out Browser Add-on. To opt out of interest-based advertising from multiple providers, visit Your Online Choices (EU) or Network Advertising Initiative (NAI).
We review and update this Cookie Policy when we change the cookies we use, when relevant laws or guidance change, or at least annually. When we make significant changes, we will update the effective date at the top of this page and, where practicable, notify you via a refreshed consent banner or email. We encourage you to review this page periodically.
If you have any questions about our use of cookies or this policy, please contact our Data Protection team:
Vigilant Risk Manager Ltd — Data Protection
United Kingdom
You can also read our full Privacy Policy for more information about how we process personal data.