Cookie and Visitor Tracking Policy

What this policy covers

“Cookies” in this policy includes cookies and similar technologies such as local storage, session storage, scripts, tags, and network identifiers. These technologies can remember a choice, keep a feature working, distinguish a browser, measure use of the website, or help infer which business may be visiting.

This policy should be read with our Privacy Policy, which explains how personal data is used and how to exercise your data-protection rights.

Essential and functional storage

cookie_pref_v1 records whether you selected “essential only” or “accept all”. It is stored as a first-party cookie for 12 months and may also be copied to local storage until you clear the website’s data.

Authorised content-management users may receive okto_session for the browser session and, if they choose to remain signed in, remember_me for up to 60 days. These support secure authentication and are not used for marketing.

The coffee and machine quizzes use nespressoCoffeeQuizProgressV1 and nespressoMachineQuizProgressV1 in local storage so progress can be resumed. Quiz result keys are kept in session storage for the current browser session. Progress is removed when the quiz is completed or restarted, or when you clear site data.

Optional first-party visitor analytics

When you select “accept all”, this website creates a random browser identifier in local storage under nespresso_analytics_visitor. It remains until you clear site data. A random session identifier and session-start time are stored under nespresso_analytics_session and nespresso_analytics_session_started in session storage until the browser session ends.

Our analytics records:

• pages viewed, page titles, query strings, referring pages, and UTM campaign parameters;
• IP address, user agent, browser language and timezone, platform, touch capability, screen and viewport dimensions;
• approximate country, region, city, timezone, and coordinates derived from network headers or an IP-location service;
• time on page, engaged time, scroll depth, page dimensions, and whether a visit appears to be a bounce;
• sampled click, mouse-movement, touch, and attention coordinates used to create page heatmaps;
• CTA labels, form-submission attempts, and coffee or machine quiz interactions and recommendations.

The analytics does not record passwords or the values typed into form fields. It respects an enabled browser “Do Not Track” signal and does not start when “essential only” is selected.

Market Location LeadsStream

Where enabled, public marketing pages load the Market Location LeadsStream script from mlleadsstream.marketlocation.com. LeadsStream is a B2B visitor-identification and intent-intelligence service used to identify likely visiting organisations, understand business interest, and support relevant sales follow-up even when no form is submitted.

The LeadsStream script calls api.ipify.org to obtain the visitor’s public IP address. It then sends the public IP address, the full current page URL, referring page, and UTM source, medium, campaign, term, and content values to Market Location. Market Location may compare this information with its business database to infer the organisation associated with the visit and enrich the visit with company-level information.

The Market Location script host may set ARRAffinity and ARRAffinitySameSite third-party session cookies for service routing and load balancing. These normally expire at the end of the browser session, although browser controls may block them.

More information is available from Market Location’s Privacy and Fair Processing Notice and LeadsStream service information.

Lead matching and profiling

We may match first-party visitor analytics to a business enquiry submitted from the same IP address. We may also compare LeadsStream journey data with local analytics using visit timing, page paths and order, page count, duration, referrer, and campaign source. This can create a probabilistic match between a browser session and a company identified by Market Location.

Matched data may be used to measure business interest, prioritise follow-up, segment CRM audiences, and support business-to-business retargeting workflows. A company or session match is an inference and may not identify the individual person using the device.

Your choices

The cookie banner lets you select “essential only” or “accept all”. Selecting “essential only” prevents our optional first-party analytics identifiers and events from being created. LeadsStream is a separate integration and, where enabled, may still make the network requests described above on public marketing pages.

You can change the first-party choice by clearing this website’s cookies and local storage, then revisiting the site to display the banner again. Your browser can also delete or block cookies, local storage, and third-party cookies. Blocking these technologies may prevent preferences or quiz progress from being remembered.

Data recipients and retention

First-party analytics is sent to and stored by this website. The ipify service receives the request needed to return the public IP address; Market Location Limited receives the IP address and the journey and campaign details described above. Their handling of information is governed by their own privacy terms and our arrangements with relevant service providers.

Browser identifiers last for the periods stated above. Server-side analytics, lead matches, and business-identification records are retained in line with internal data-retention schedules and are deleted or anonymised when no longer required for the stated purposes.

Questions and policy changes

We may update this policy when tracking technologies or their purposes change. The date at the top will show the latest revision. To ask about tracking data, request access or deletion, or object to processing, contact the business support team using the details on our Privacy Policy.