QURO HOLDINGSQURO HOLDINGS — COOKIE POLICY
1. What this covers
1.1 This policy explains the cookies and similar technologies used on quro.sg, app.quro.sg and quroholdings.com, all operated by Quro Holdings Pte. Ltd. (UEN 202628109K).
1.2 It sits alongside our Privacy Policy, which explains everything else we do with personal data. Cookie identifiers are personal data under the Personal Data Protection Act 2012, so both apply.
2. What a cookie is, briefly
A cookie is a small file a website stores on your device. Some are needed for the site to work at all; others tell us how the site is being used. We also use similar technologies — local storage and pixels — and where we say "cookies" below we mean all of them.
3. The categories we use
| Category | Do we need your consent? | What it does |
|---|---|---|
| Strictly necessary | No — these cannot be switched off | Keeps you signed in, protects forms against abuse, remembers your cookie choice itself |
| Analytics / performance | Yes | Tells us how many people visit, which pages they use, and where they give up |
| Advertising / cross-site tracking | Yes — always an explicit opt-in | Would let us measure and target advertising. Nothing in this category is running today |
| Functional / preferences | Yes, if we use any | Remembering a preference. We use none today |
Advertising never runs without your explicit consent, and that does not vary by where you are.
4. Every cookie we set
4.1 Strictly necessary
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
quro_consent | Quro | Stores your cookie choice so we do not ask again, and so we can prove what you chose | 12 months |
| Session / authentication cookie | Quro | Keeps you signed in to your account | Session, or until sign-out |
4.2 Analytics / performance — set only after you consent
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes one visitor from another | 2 years |
_ga_Z03KSBG5FP | Google Analytics 4 | Keeps session state for our specific analytics property | 2 years |
Google Analytics 4 is our only analytics tool. We use Google Tag Manager to load and control it; the container itself sets no tracking cookie and loads nothing until your choice is recorded.
4.3 Advertising / cross-site tracking
None. Nothing in this category is running today. Google Ads and Meta Pixel are planned but not live, and neither will run until you have explicitly opted in. When one is added, this table and the tag inventory are updated in the same change, and the banner asks you first.
4.4 Functional / preferences
None today. The category exists so that a future preference cookie is disclosed properly instead of being quietly filed as "necessary".
5. Your choices
5.1 What happens today — stated plainly. Our cookie consent banner is not yet live. Until it is, analytics cookies run when you visit, and you can opt out at any time using your browser settings or Google's opt-out browser add-on (5.5). No advertising or cross-site tracking cookies run at all — that is true today, independently of the banner (see 4.3). We would rather tell you this than describe a chooser that is not yet in front of you.
5.2 When the banner launches, this is the model we have committed to and what you will see:
- we ask first — nothing but strictly necessary cookies runs until you answer;
- refusing is as easy as accepting: no pre-ticked boxes, no "legitimate interest" toggle buried a level down, and no dark pattern that makes rejection slower;
- you can change your mind at any time from the cookie settings link in the footer; and
- where your browser sends a Global Privacy Control signal, we will treat it as a refusal of analytics and advertising and will not show you a banner.
5.3 Changing your mind. Withdrawing consent immediately stops those tags from firing, instructs our systems to expire the relevant first-party cookies, and halts all future collection in that category. Some cookies set by a third party under their own domain can only be cleared from your browser settings — we tell you that rather than promise a deletion the browser will not let us perform.
5.4 We will not quietly start. No advertising or cross-site tracking tag will run before you have been asked and have agreed. If that ever changes, this page changes with it, and the ask comes first.
5.5 Your browser always works. You can block or clear cookies in your browser settings whatever we do. Blocking strictly necessary ones will stop parts of Quro working.
5.6 Cross-domain consent independence. We use Google Analytics 4 across our marketplace (quro.sg and app.quro.sg) and our corporate site (quroholdings.com). These sit on separate root domains, so your cookie preferences are recorded independently for each. Consenting on quro.sg does not carry over to quroholdings.com, and you may be asked to set your preferences separately if you visit both. Within our marketplace, a preference set on quro.sg applies when you sign in to app.quro.sg.
6. Who else sees this data
Analytics data is processed by Google as our service provider, and Google processes it outside Singapore. To meet our obligations under section 26 of the PDPA (the transfer limitation obligation), we rely on Google's Data Processing Addendum and the Standard Contractual Clauses incorporated into it, which bind Google to a standard of protection comparable to Singapore law.
We do not sell data collected by cookies, and we do not use it to target advertising anywhere else.
7. How long we keep it
Cookie durations are in section 4. The analytics data behind them is retained for 14 months , after which it is deleted or aggregated beyond recovery.
8. Questions, and how to reach us
Our Data Protection Officer handles anything about this policy, including asking us what we hold and asking us to delete it:
Data Protection Officer: Ronnie Choo, Quro Holdings Pte. Ltd. (UEN 202628109K)
Email: dpo@quroholdings.com
Post: 60 Paya Lebar Road #06-28, Singapore 409051
You may also complain to the Personal Data Protection Commission of Singapore (pdpc.gov.sg).
9. Changes
We update this policy whenever a tag is added or removed — that is a governed change under §6 of the cookie-consent spec, not an afterthought. The version and date at the top always reflect the current state.
Legal: Privacy Policy · Cookie Policy · Terms
Quro Holdings Pte. Ltd. (UEN 202628109K), 60 Paya Lebar Road #06-28, Singapore 409051. Questions about your data? Contact our Data Protection Officer, Ronnie Choo, at dpo@quroholdings.com.