Cookies are small text files stored on your browser or device when you visit a website. Similar technologies (web beacons, pixels, local storage, device fingerprints) operate on the same principles and are covered by this Policy.

Cookies help websites:

• Maintain secure authenticated sessions
• Remember user preferences
• Support core functionality such as shopping carts
• Detect and prevent fraud
• Analyse and improve performance

2.1 Strictly necessary (essential) cookies

Required for the Platform to operate. Disabling them will break core functionality. No consent is required for these cookies under POPIA because processing is necessary for the performance of the contract with you. Used for:

• Login authentication and session management
• Shopping cart and checkout
• Security and fraud prevention
• Load balancing and routing
• Cookie consent preferences themselves

2.2 Functional cookies

Remember choices you make to improve your experience, including:

• Language and region preferences
• Wishlist state across sessions
• Display preferences (for example, dark mode)
• Localised configurations

2.3 Analytics and performance cookies

Help us understand how the Platform is used so we can improve it. These are aggregated and, where possible, pseudonymised. Used for:

• Page-performance and load metrics
• User-interaction flows
• Error detection
• Feature-usage measurement

We may use third-party analytics providers (including Google Analytics) for these purposes.

2.4 Marketing and retargeting cookies

Used to deliver personalised offers or retargeting where you have consented.

• Session cookies: Expire when you close your browser.
• Persistent cookies: Remain stored for a defined period (typically up to 24 months for analytics, 12 months for functional).

The Platform uses a two-tier consent model that complies with POPIA:

• Strictly necessary cookies are set by default. Consent is not required because they are necessary for the contract.
• All other cookies (functional, analytics, marketing) are set only after you give consent through the cookie banner or preference centre.

You may grant, refuse, or withdraw consent at any time using the Cookie Preferences link in the Platform footer. Withdrawal of consent stops further processing but does not affect processing already carried out.

You can manage cookies in two places:

• On the Platform: Use the Cookie Preferences link in the footer to enable or disable optional categories.
• In your browser: Most browsers allow you to block, delete, or restrict cookies. Browser-level blocking of essential cookies may prevent login, checkout, and other core functions from working.

Where technically feasible, we respect "Do Not Track" signals sent by browsers for non-essential cookies. Because there is no universal industry standard for honouring DNT, we cannot guarantee full compliance with every browser implementation.

The following is an indicative summary. The Cookie Preferences page on the Platform contains the current detailed list.

Third-party providers may independently place cookies subject to their own privacy policies, including:

• Analytics providers
• Payment processors (during checkout flows)
• Embedded content providers
• Fraud-prevention services

Where these are non-essential, they are loaded only after you consent.

We may update this Cookies Policy periodically to reflect operational, legal, or technical changes. The effective date and version number will be updated. Material changes that introduce new processing purposes or recipients will trigger a fresh consent request through the cookie banner.

Questions about this Cookies Policy should be directed to:

GP Holding (Pty) Ltd t/a Offers On
Email: info@gpholding.co.za
Telephone: 011 613 1052
Address: 1 Yarmouth Rd, Mulbarton, Johannesburg South, 2059