Cookie Policy

Last updated: 25 June 2026

1. Introduction

This Cookie Policy explains how D&M GROUP, the company operating the verrabrand and the website verra.work (“we”, “us”, “the website”), uses cookies and similar technologies, and the choices available to you. It should be read together with our Privacy Policy.

By “cookies” we mean cookies and equivalent technologies (such as pixels, local storage, and similar identifiers) that store or read information on your device.

2. What is a cookie?

A cookie is a small text file placed on your device when you visit a website. It allows the site, or a third party, to recognise your device and store certain information. Some cookies are set by us (“first-party”), others by external services we use (“third-party”).

3. The categories of cookies we use, and when we ask for consent

French rules (the ePrivacy directive as applied by the CNIL) distinguish two situations:

  • Strictly necessary cookies make the website work or remember your consent choice. These do not require your consent and cannot be switched off.
  • All other cookies — in particular those set by content embedded from third parties — require your prior consent. They are not placed until you actively agree through our cookie banner, and you can refuse or withdraw consent as easily as you give it.

3.1 Strictly necessary cookies (no consent required)

These keep the site secure and functioning and store your cookie preferences so we don’t ask you on every page. This includes the cookies set by our consent-management banner to record which categories you accepted or refused.

3.2 Audience measurement — Vercel Web Analytics (cookieless, no consent required)

We measure aggregate website traffic using Vercel Web Analytics. This tool is cookieless: it stores no cookies or other identifiers on your device, identifies visitors only through a temporary daily hash, and produces anonymous, aggregated statistics that cannot identify you or track you across other websites. Because it places nothing on your device, it falls outside the consent requirement. We list it here for transparency.

3.3 Embedded third-party content (consent required)

Some pages include content embedded from third parties. When such content loads, the third party may set its own cookies on your device, so we load it only after you have consented:

  • HubSpot forms. Our contact/enquiry forms are embedded from HubSpot. Loading a form retrieves a script from HubSpot (a company established in the United States) and, depending on the form, may set a cookie (hubspotutk) that links your submission to your contact record and helps prevent duplicate entries. We do notuse HubSpot’s site-wide tracking code, so HubSpot’s analytics cookies (__hstc, __hssc, __hssrc) are not set on this website.
  • YouTube videos.When embedded video content loads, YouTube may set its own cookies. Where technically possible we use privacy-enhanced embedding (such as YouTube’s no-cookie mode) to reduce the data collected.

These cookies are controlled by the third party concerned, not by us; please refer to their own policies (YouTube: policies.google.com/technologies/cookies; HubSpot: legal.hubspot.com).

4. Cookies placed on this website

The table below lists the main non-essential cookies. Exact names and durations are set by the third-party providers and may change; the values below are those published by the providers at the date of this policy. We recommend verifying the live site after deployment to confirm exactly what is set.

CookieProviderCategoryPurposeDuration
hubspotutkHubSpotEmbedded formIdentifies a visitor so that a form submission can be linked to a contact record and duplicates avoided. May be set when a HubSpot form is loaded or submitted.6 months
VISITOR_INFO1_LIVE, YSCGoogle / YouTubeEmbedded contentSet when an embedded YouTube video loads; used by YouTube to remember preferences and measure playback.Up to ~6 months / session

Cookies set by our consent banner and other strictly necessary cookies are not listed here because they do not require consent. Vercel Web Analytics is not listed because it sets no cookies.

5. How to manage your consent

On the website. When you first visit verra.work, a banner lets you accept or refuse non-essential cookies and the embedded content that sets them. Refusing is as easy as accepting, nothing is pre-selected, and the relevant content is not loaded until you agree. You can change or withdraw your choice at any time by clicking the button below.

In your browser.You can also block or delete cookies through your browser settings. Note that disabling strictly necessary cookies may stop parts of the site working. Instructions are available in your browser’s help section.

6. Transfers outside the EU/EEA

Some of the providers above (HubSpot, Google and our host Vercel) are established in the United States and may process data outside the European Economic Area. Such transfers are governed by appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework. For more detail, see our Privacy Policy.

7. Your rights and contact

You have the right to access, rectify, erase, and object to the processing of your personal data, and to lodge a complaint with the CNIL (www.cnil.fr). To exercise your rights or ask any question about this policy, contact us at privacy@descartesmauss.ai.

D&M GROUP — 3 rue du Colonel Moll, 75017 Paris, France.

8. Changes to this policy

We may update this Cookie Policy to reflect changes in the cookies we use or in applicable law. The “last updated” date at the top indicates the most recent revision.