1. What cookies and similar technologies are
Cookies are small text files placed on your browser or device by websites you visit. Websites may also use local storage, session identifiers and server logs to deliver core features, secure forms, remember preferences and analyze website usage.
Standard technical information such as your IP address, browser type, referring URL and timestamp may be recorded in server security logs without a browser cookie.
2. Our approach and consent system
We believe in privacy by design and data minimisation. Our website uses a lightweight, first-party consent manager that operates according to the following principles:
- Strictly necessary by default: Technologies required for basic website operation, CSRF form protection, automated bot and spam defence (Cloudflare Turnstile), and consent preference storage are enabled automatically.
- Optional technologies default to denied: Analytics and advertising technologies remain completely denied until you make an affirmative choice.
- Basic Consent Mode: When Google measurement tags are configured, they operate under Basic Consent Mode-meaning no tracking scripts are loaded and no measurement pings are transmitted before consent.
- Easy withdrawal: You can change or withdraw your consent at any time via the “Cookie settings” button in the website footer.
3. Technologies used on this website
| Technology / Cookie | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
megha_cookie_consent |
First-party (Megha Marine) | Strictly necessary | Stores your cookie and privacy consent preferences across visits. | 180 days (~6 months) |
megha_marine_session |
First-party (Megha Marine) | Strictly necessary | Maintains secure session state and form continuity across page requests. | 2 hours (Session) |
XSRF-TOKEN |
First-party (Megha Marine) | Strictly necessary | Protects forms against Cross-Site Request Forgery (CSRF) security attacks. | 2 hours (Session) |
Cloudflare Turnstile (widget & challenge tokens) |
Cloudflare, Inc. | Strictly necessary | Defends public forms from automated bots and malicious spam by evaluating browser and device telemetry. | Session / challenge duration (transient) |
_ga, _ga_* (optional / configurable) |
Google (GA4) | Analytics | Measures aggregate site usage and page traffic. Loads only after affirmative consent. | Up to 2 years |
_gcl_* (optional / configurable) |
Google Ads | Advertising & Measurement | Measures advertising campaign conversions. Loads only after affirmative consent. | Up to 90 days |
4. Third-party providers and data responsibility
We self-host production fonts and images to avoid unnecessary third-party data transmissions. Where third-party technologies and security services are integrated, they are managed under strict data governance standards:
Cloudflare Turnstile (Bot & Abuse Protection): We use Cloudflare Turnstile, operated by Cloudflare, Inc., to protect our contact, quote, and vessel enquiry forms from automated bot attacks, credential abuse, and spam. Turnstile operates seamlessly in the background without intrusive visual puzzles. When a form is loaded or submitted, Turnstile evaluates technical device and browser signals (including IP address, HTTP headers, and browser characteristics) solely to verify that the interaction is from a legitimate human user. Because this protection is essential for securing our communication channels and website infrastructure, it is classified as strictly necessary. For further details on Cloudflare’s privacy and security standards, visit Cloudflare's Privacy Policy.
Google Analytics & Tag Manager: When third-party measurement services such as Google Analytics or Google Tag Manager are enabled in site settings and permitted by your affirmative consent, technical and usage data is processed by Google under Basic Consent Mode in accordance with its privacy practices. For more information on Google’s data handling, see Google's Business Data Responsibility site and our Privacy Policy.
Third-Party Brand & Membership Logos: All third-party brand names, equipment logos, and industry association badges (such as the Boating Industry Association of Victoria / BIAV) displayed on the website are static visual assets. They are hosted for accreditation, genuine membership verification, and descriptive identification purposes only, and do not set cookies or track user activity.
5. Managing your preferences
You have full control over optional cookies and tracking technologies:
- Cookie settings button: Click “Cookie settings” in our website footer at any time to open the preference panel and modify or withdraw your choices.
- Browser controls: Most browsers allow you to view, manage and delete cookies through their settings menu. Note that blocking strictly necessary cookies may impair form submissions or site functionality.
6. Changes to this notice
We will update this notice when our website technologies, service providers, or legal obligations change. The effective date at the top of this page indicates the current revision.
7. Contact
For questions regarding our cookie practices or website privacy, contact us at:
64 Sunny St, Sunbury VIC 3429, Australia
services@meghamarine.com.au
+61 433 930 644
See our Privacy Policy for information on access, corrections and privacy complaints under Australian law.