1. Introduction

This Cookie and Tracking Disclosure ("Disclosure") explains how Alto Media (Pty) Ltd ("Alto Media", "we", "us", or "our") uses cookies, tracking technologies, and similar mechanisms on the Alto Base platform, including our website, web application, and mobile applications (collectively, the "Platform").

This Disclosure should be read together with our Privacy Policy, which provides full details about how we collect, use, and protect your personal information.

2. What Are Cookies and Tracking Technologies?

Cookies are small text files placed on your device by a website or application. They are widely used to make platforms work efficiently, remember your preferences, and provide usage information.

Tracking technologies include, but are not limited to:

• Cookies (session and persistent)

• Local storage and session storage (browser-based data storage)

• Pixels and web beacons (small, transparent images embedded in pages or emails that record activity)

• Device identifiers (unique identifiers assigned to mobile devices)

• Log files (server-side records of activity)

• SDKs (software development kits embedded in mobile applications)

3. Types of Cookies and Technologies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as authentication, session management, and security. Without these cookies, the Platform cannot operate.

Purpose Description Duration Authentication Keeps you signed in during your session and across sessions if you choose "Remember me" Session / up to 30 days Security Prevents cross-site request forgery (CSRF) and other security threats Session Load Balancing Distributes traffic across servers for optimal performance Session

These cookies cannot be disabled without breaking the Platform's functionality.

3.2 Functional Cookies

These cookies remember your choices and preferences to provide a more personalised experience.

Purpose Description Duration Language and Locale Remembers your preferred language and regional settings Persistent (up to 1 year) Interface Preferences Remembers display settings such as theme, layout, and dashboard configuration Persistent (up to 1 year) Recent Activity Stores recently accessed items for quick navigation Session

3.3 Analytics and Performance Cookies

These cookies collect information about how you use the Platform, helping us understand usage patterns and improve performance. This data is aggregated and anonymised where possible.

Purpose Description Duration Usage Analytics Tracks pages visited, features used, session duration, and user flows Persistent (up to 2 years) Performance Monitoring Monitors page load times, errors, and system performance Session / Persistent (up to 1 year) Crash Reporting Collects technical data when errors occur to help us diagnose and resolve issues Persistent (up to 90 days)

3.4 Third-Party Cookies and Technologies

We may use third-party services that set their own cookies or tracking technologies. These include:

Service Purpose Privacy Policy Google Analytics (if enabled) Website and usage analytics https://policies.google.com/privacy Payment Processor Payment processing and fraud detection Refer to the payment provider's privacy policy WhatsApp Business API Message delivery and read receipts https://www.whatsapp.com/legal/privacy-policy

We do not control the cookies set by third-party services. We encourage you to review their respective privacy policies.

4. Mobile Application Tracking

4.1 Device Identifiers

Our mobile applications may collect device identifiers (such as advertising IDs) for analytics and performance purposes. You can reset or limit the use of your advertising ID through your device settings.

4.2 Location Data

If you enable geo-fencing features, the mobile application will access your device's location services. Location data is used solely for attendance tracking and proximity-based check-in as described in our Privacy Policy. You can disable location access at any time through your device settings.

4.3 Push Notifications

We may send push notifications to your mobile device for communication and alerts. You can manage push notification preferences through your device settings or within the Platform.

5. How We Use Information from Cookies and Tracking

Information collected through cookies and tracking technologies is used to:

• Operate and secure the Platform.

• Authenticate users and maintain sessions.

• Remember your preferences and settings.

• Analyse usage patterns to improve features and performance.

• Diagnose and resolve technical issues.

• Understand which features are most used and valued.

• Comply with legal obligations.

We do not use cookies or tracking technologies for advertising or to build advertising profiles.

6. Your Choices and Controls

6.1 Browser Cookie Settings

Most web browsers allow you to control cookies through their settings. You can typically:

• View cookies stored on your device.

• Delete some or all cookies.

• Block cookies from specific sites or all sites.

• Set your browser to notify you when a cookie is set.

Please note that disabling or deleting strictly necessary cookies may prevent the Platform from functioning correctly.

6.2 Mobile Device Settings

On mobile devices, you can manage tracking through your device settings:

• Location Services: Enable or disable location access for the Alto Base app.

• Push Notifications: Enable or disable notifications for the Alto Base app.

• Advertising ID: Reset or limit ad tracking through your device's privacy settings.

6.3 Opt-Out of Analytics

If you wish to opt out of analytics tracking, you may:

• Adjust your cookie preferences through the cookie banner displayed on the Platform (where available).

• Use browser extensions such as the Google Analytics Opt-Out Add-On.

• Contact us at the address below to request that analytics tracking be disabled for your account.

7. Data Retention

Cookie data is retained for the durations indicated in Section 3 above. When cookies expire, the data is automatically deleted. Server-side log data is retained for a maximum of 12 months, unless longer retention is required for security investigations or legal compliance.

8. International Data Transfers

Some third-party services we use may process cookie and tracking data outside of South Africa. Where this occurs, we ensure appropriate safeguards are in place in accordance with POPIA and, where applicable, GDPR. Please refer to our Privacy Policy for more information on international data transfers.

9. POPIA and GDPR Compliance

9.1 Under POPIA

In accordance with POPIA, we provide you with clear information about the tracking technologies we use and their purposes. Where cookies are not strictly necessary for the operation of the Platform, we rely on your consent.

9.2 Under GDPR

For users in the EU/EEA, we comply with GDPR requirements for cookie consent. We obtain your consent before placing non-essential cookies (functional and analytics) on your device. You may withdraw your consent at any time using the mechanisms described in Section 6 above.

10. Changes to This Disclosure

We may update this Disclosure from time to time. We will notify you of material changes via email or in-app notification. The updated Disclosure will be effective as of the date indicated at the top of this document.

11. Contact Us

If you have questions about this Cookie and Tracking Disclosure, please contact us:

Alto Media (Pty) Ltd
Big Bay, Cape Town, South Africa

Email: privacy@altobase.co.za
General Enquiries: hello@altobase.co.za

This Cookie and Tracking Disclosure was last updated on 28 June 2026.