Cookie and Similar Technologies Policy
Effective date: From the first publication of this version on b2b.scrolling.in, subject to the notice and existing-Order protections in the Marketplace Terms.
1. Scope and responsibility
This Policy explains cookies, browser storage, pixels, scripts and similar technologies used in connection with https://b2b.scrolling.in. The operator is Burbn Inc., identified in the Marketplace Terms. The Privacy Policy explains the related processing of personal data, recipients, retention and rights.
The B2B website may use a shared Burbn authentication service. A cookie associated with that service can affect sign-in across the relevant Burbn domains. That technical relationship does not authorise unrelated advertising or public disclosure of private procurement information.
2. What these technologies do
A cookie is a small record that a website asks a browser to store and send with relevant later requests. A session cookie normally lasts for a browser session, although a browser's session-restoration settings can preserve it. A persistent cookie has a specified expiry unless removed earlier.
Local storage can retain information until the site or user removes it. Session storage normally applies to a browser tab or session. Pixels, beacons, embedded media, scripts and server-side event collection may communicate information even when no cookie is stored. Relevant information can include an IP address, browser details, requested page, time and a service identifier.
The term “cookie” in this Policy includes these comparable technologies where appropriate. Blocking cookies alone does not prevent every network request or all processing of personal data.
3. Purposes and categories
| Category | Examples of permitted purpose | Choice and limits |
|---|---|---|
| Necessary service and security | Authenticate a requested session, prevent forged requests, maintain a requested transaction state, protect accounts and record a legally necessary preference. | Used only to the extent necessary for the requested service and permitted by applicable law. They must not be repurposed for unrelated advertising. |
| Optional preferences | Remember a non-essential display or convenience preference across visits. | Enable only on an appropriate lawful basis and with any required choice. A user can still obtain the core service without an unrelated optional preference. |
| Optional analytics | Measure page performance and use to improve the service beyond what is strictly necessary for security and delivery. | Use any consent required by applicable law; do not classify all measurement as necessary merely because it benefits the business. |
| Advertising and personalisation | Measure campaigns, build advertising audiences or personalise promotional content. | Enable only where actually offered, disclosed and lawful, with the required consent or opt-out. A terms checkbox does not provide blanket advertising consent. |
| Optional embedded features | Load a third-party video, communication widget, map or other optional feature requested by the user. | Explain the provider and relevant data exchange before activation where required. Separate optional loading from the core transaction where practicable. |
These categories explain the uses and limits that apply when a technology is enabled. They do not mean that every category or example is active on every page. The technologies encountered can vary with the page, sign-in state, browser, selected feature and choices made.
4. Shared authentication record and duration
The shared Burbn authentication service can set the session record identified below. Its name, domain and session duration identify that record; the name alone does not establish every processing purpose or justify treating unrelated tracking as necessary.
| Technology | Domain or service | Service context | Storage duration |
|---|---|---|---|
scroll_csrf | auth.scrolling.in | A browser record set by the shared Burbn authentication service. | Session; browser session restoration may affect deletion. |
This table identifies a shared authentication record; it is not an exhaustive inventory of every feature, browser session or third-party service. Browser site settings can show the records actually stored on your device. For information about a particular name, domain, purpose, retention period or recipient, contact privacy@scrolling.in. Identify the page or feature and the cookie name where possible, but do not send the cookie value, authentication token or password.
A technology's browser expiry can differ from the period for which associated server records are retained. Server-side retention follows the purposes and limits in the Privacy Policy and the relevant provider notice. Deleting a browser record does not by itself delete records already held on a server or withdraw an Order.
Where an enabled feature uses additional technologies requiring specific notice or consent, the relevant provider, purpose, duration and choices will be explained with that feature or its privacy notice before the processing for which the information or consent is required.
5. Choice before optional processing
Where prior consent is required, optional technology must remain inactive until an affirmative choice has been made. Browsing, closing a notice or accepting the marketplace contract is not by itself consent to optional tracking.
Where such a choice is presented, it will identify the purposes clearly and offer a way to refuse optional categories as readily as accepting them. Necessary technologies will be explained separately. We will not use a preselected option, repeated obstruction or a misleading button to obtain consent.
Where a technology is lawfully operated without consent, its purpose, data and legal basis must still be disclosed accurately. “Cookieless” does not mean anonymous or exempt from privacy law. The grounds described in the Privacy Policy apply to the resulting personal-data processing.
6. Reviewing or withdrawing a choice
Use your browser's site-data settings to review or remove stored records and manage cookie permissions. If a feature presents an optional-processing choice, use that feature's disclosed control to review or change it. The availability and location of a feature-specific control will be explained when the feature is offered; this Policy does not assume that a universal cookie-preference centre is available.
You can also contact privacy@scrolling.in about tracking or consent. An email request is an assistance route; it is not a substitute for a functioning prior-choice mechanism where the law requires one.
Withdrawal stops future consent-dependent processing as required. We will remove or render inactive the relevant records under our control where technically possible and provide the relevant withdrawal instruction to our processors. You may also need to delete records through your browser. Some previously transmitted records may remain for a lawful, limited reason explained in the Privacy Policy. We will not treat withdrawal as permission to reconstruct the same advertising profile by another method.
7. Browser and device controls
Browsers usually allow you to review stored site data, delete cookies, block selected domains or limit third-party cookies. Use the browser's current privacy or site-settings menu. Device settings can separately control advertising identifiers, camera access, microphone access and notifications.
Deleting or blocking necessary authentication or security records can sign you out, prevent a session from working or interrupt an unfinished process. Confirm the saved Order and payment status before retrying a transaction after changing browser settings. An interrupted session does not cancel an accepted Order or remove a due refund.
Preferences can be specific to a browser, profile and device. Clearing storage, changing browsers or using a private window may require setting them again. We will not knowingly disregard an applicable consent refusal merely because a user signs in from the same browser.
8. Shared domains and third-party requests
A product image, video, script or other resource can be delivered from a domain other than b2b.scrolling.in. The recipient may obtain the network information necessary to deliver the resource and may process additional information according to the actual implementation.
The Privacy Policy explains the distinction between a vendor acting for Burbn and a provider using data for independent purposes. Loading a necessary product image is not blanket permission for the recipient to undertake unrelated advertising. Where an optional provider requires prior consent or additional notice, the feature must follow that requirement before activation.
Logging in through a shared authentication domain does not automatically synchronise promotional choices across every Burbn website. Any shared consent record must accurately reflect the person's choice, its purposes and the services covered.
9. Analytics, advertising and business confidentiality
Analytics and advertising events must be limited to what is necessary for the disclosed purpose. Do not include confidential RFQ text, technical drawings, payment credentials, identity documents, private messages or customer contact lists in ordinary page events, URL parameters or advertising audiences.
Where a Supplier or advertiser has access to reporting, aggregated reporting should be used where suitable. Identifiable information requires its own lawful purpose and restrictions. Hashing an email or substituting an identifier does not necessarily make a record anonymous.
The description of a category does not promise a particular analytics service, advertising partner or personalisation capability. Where a provider is introduced or a purpose changes, the applicable information and choices will be supplied before processing that requires them.
10. Preference signals and records
Where applicable law requires us to recognise a browser or device privacy signal, we will apply it to the covered processing. Otherwise, do not assume every generic “Do Not Track” signal is supported; use an available feature-specific control or contact us for the current position.
We retain proportionate consent and refusal records to demonstrate and honour choices, including the relevant notice version, purposes, time and method. Such records should not contain more data than necessary or become a separate marketing profile. Applicable legal retention duties and documented legal holds are explained in the Privacy Policy.
11. Changes and contact
Material changes to tracking purposes, recipients or retention will be reflected in this Policy or the relevant feature notice and any applicable controls. Fresh consent will be sought where required. A revised notice alone does not retrospectively permit an earlier undisclosed use.
For questions or an inaccessible control, contact privacy@scrolling.in. Formal complaints and escalation are available through the Grievance Redressal and Contact Policy.
Need help with this policy?
Contact support@scrolling.in or read our grievance and contact policy.