Cookie Policy

This Cookie Policy explains how Momentum Spark Pte. Ltd. (“KitaHQ”, “we”, “us” or “our”) uses cookies and similar browser storage on the public website and KitaHQ product surfaces.

This Policy should be read with the Privacy Notice.

‍

1. What cookies and similar technologies are

Cookies are small files stored by a website in your browser. Similar technologies include local storage and other identifiers used to maintain a session, remember settings, measure website use or protect a service.

Camera and microphone permissions are browser or device permissions. They are separate from cookie choices.

‍

2. Technologies currently used

Essential session and authentication technologies

KitaHQ uses session and authentication technologies on account and candidate surfaces where they are necessary to sign users in, maintain a secure session, prevent abuse and deliver requested functionality. Disabling these technologies may prevent parts of the service from working.

Website analytics

KitaHQ uses Google Analytics 4 and Microsoft Clarity on the public website to understand website use and improve performance. These analytics technologies are non-essential and remain disabled until the visitor selects Accept all. Visitors can select Reject non-essential and continue using essential website functions.

Website forms

KitaHQ uses Webflow forms to receive information that a visitor chooses to submit. Form submissions are covered by the Privacy Notice. A form submission is not itself a cookie category.

Advertising measurement

KitaHQ does not display advertising on the public website. KitaHQ uses Google Ads conversion measurement to understand whether marketing campaigns lead to actions such as booking a demo or submitting a form. These measurement technologies are non-essential and remain disabled until the visitor selects Accept all. KitaHQ does not use camera or microphone permission as an advertising identifier.

‍

3. Why we use these technologies

We use cookies and similar technologies to:

• provide requested Site and product functionality;
• maintain and secure sessions;
• detect abuse and troubleshoot technical problems;
• understand how the public website is used; and
• improve website reliability and navigation, and measure whether marketing campaigns lead to actions such as booking a demo or submitting a form.

We do not use camera or microphone permission as an advertising identifier.

‍

4. Your choices

Essential technologies operate automatically because they are needed to provide or secure the requested service. Before analytics or advertising measurement is activated, you can select Accept all or Reject non-essential. You can later change or withdraw your choice through Cookie Settings. Rejecting non-essential technologies does not prevent essential website functions.

You can also delete or block cookies through browser settings. Blocking essential session or authentication technologies may prevent account or interview functions from working. Questions about website analytics or personal data may be sent to privacy@kitahq.com.

‍

5. Third-party processing

Google processes Google Analytics 4 and Google Ads conversion-measurement information, and Microsoft processes Clarity information, according to their applicable terms and privacy documentation. KitaHQ uses these providers for public-website measurement and improvement and configures the tags to respect the visitor’s consent choice. Google Tag Manager manages tag deployment; it does not itself authorize non-essential measurement.

‍

6. Retention

Session technologies may expire when the browser session ends or after a security timeout. Persistent authentication, analytics and advertising-measurement technologies remain until their configured expiration, deletion by the user or a configuration change.

Analytics and advertising-measurement technologies remain until the period shown in Cookie Settings expires, you withdraw your choice, you delete them through your browser, or KitaHQ changes the configuration. KitaHQ will update this Policy if the categories, purposes, providers or durations materially change.

‍

7. Changes

We may update this Policy when our website, technology or legal requirements change. We will publish the revised effective date and provide additional notice or choices where required.

‍

8. Contact

Questions about this Policy or website privacy may be sent to privacy@kitahq.com

‍

9. Country-specific cookie and measurement notes

These notes explain how the global Cookie Policy should be applied in KitaHQ’s priority markets. They do not change the technology inventory: KitaHQ does not display advertising on the public website; Google Ads technologies are used for conversion measurement. Any statement that analytics or measurement is blocked until consent may be published only after the implemented controls pass QA.

United States

United States rules vary by state and by how each tag is configured and used. Where an applicable state privacy law treats a use as sale, sharing or targeted advertising, the required opt-out mechanism and recognized browser signals must be honored. KitaHQ should describe Google Analytics, Google Tag Manager, Microsoft Clarity and Google Ads conversion measurement by purpose rather than saying that no advertising technology exists.

Relevant authority: California Consumer Privacy Act regulations and applicable state privacy laws, including Global Privacy Control where legally required.

United Kingdom

Under the Privacy and Electronic Communications Regulations, non-essential analytics and measurement technologies generally require clear information and consent before storage or access occurs, subject to a specific exemption. Rejecting non-essential technologies must be as accessible as accepting them, and withdrawal must be available through Cookie Settings.

Relevant authority: UK PECR and Information Commissioner’s Office storage-and-access technology guidance.

Canada

Where Canadian private-sector privacy law applies, the use of cookies or similar technologies involving personal information must have an appropriate purpose and meaningful notice; consent must be meaningful where consent is the applicable authority. The policy should identify the main technologies, purposes, choices and third parties without assuming one uniform provincial rule.

Relevant authority: PIPEDA and Office of the Privacy Commissioner of Canada meaningful-consent guidance.

Australia

Australia does not use one general EU-style cookie statute, but the Privacy Act and Australian Privacy Principles may apply when cookies, pixels or similar technologies collect personal information. The Policy must accurately explain collection, purpose, disclosure, overseas handling and available choices. Consent may be required for sensitive information or particular secondary uses.

Relevant authority: Privacy Act 1988, Australian Privacy Principles and OAIC data-analytics guidance.

New Zealand

The Privacy Act 2020 applies where cookies or similar technologies collect personal information. Visitors should receive clear notice of collection and purpose, including indirect collection where Information Privacy Principle 3A applies, and information must be protected under Principle 5. New Zealand does not create a separate general EU-style prior-consent rule for every cookie.

Relevant authority: New Zealand Privacy Act 2020 and Information Privacy Principles 3, 3A and 5.

Singapore

Singapore’s PDPA applies where website technologies collect, use or disclose personal data. The global Policy should provide clear purposes, identify relevant third parties or categories, explain transfers and offer the choices KitaHQ actually provides. Singapore does not use a standalone general EU-style cookie consent law, so the wording should remain tied to personal-data obligations and the implemented interface.

Relevant authority: Singapore Personal Data Protection Act and PDPC data-protection obligations.

Malaysia

Where Malaysia’s PDPA applies to cookies, pixels or similar technologies used in commercial transactions, this Policy explains the purposes and categories of processing, relevant service providers, available choices and contact route. KitaHQ applies consent and preference controls according to the applicable processing basis and the implemented website controls.

Relevant authority: Malaysia Personal Data Protection Act 2010 and applicable amendments.

Indonesia

Undang-Undang Pelindungan Data Pribadi and the electronic-systems framework may apply where website technologies process Personal Data. The Policy should transparently identify the technologies and purposes, state the available choices and explain how visitors can contact KitaHQ. It should not imply that Google Ads conversion measurement means that KitaHQ displays advertisements on the Site.

Relevant authority: Indonesia Law No. 27 of 2022 on Personal Data Protection and applicable electronic-systems rules.

Germany and the European Union

In Germany and the EU, non-essential storage or access generally requires prior consent under section 25 TDDDG and the applicable ePrivacy rules, while subsequent personal-data processing must also have a GDPR legal basis. Analytics and conversion-measurement tags must remain blocked until valid consent unless a specific exemption is documented. Withdrawing consent must be as easy as giving it.

Relevant authority: Germany’s TDDDG section 25, EU ePrivacy rules and the GDPR.