Cookie Policy (Canada)

Cookies are small text files a website stores on your device to make it work, remember your choices, and understand how it is used. We also use similar technologies such as pixels and local storage; we refer to all of them as “cookies” in this policy.

We group the cookies we use into three categories:

• Strictly necessary — always on; the site cannot run without them, so they do not require consent.
• Analytics — optional; help us understand and improve the site. Off until you opt in.
• Marketing — optional; support advertising and campaign measurement. Off until you opt in.

You choose Analytics and Marketing independently — see “How to manage or withdraw your consent” below.

These are required to run the site and remember your privacy choice. They are always active and do not require consent.

• fa-consent — First Arriving · Purpose: stores your cookie preferences · Duration: 1 year · First-party
• payload-token — First Arriving · Purpose: keeps staff signed in to the content system (set only if you log in to the admin area) · Duration: session · First-party
• __cf_bm — Cloudflare · Purpose: bot management — distinguishes humans from automated traffic to protect the site · Duration: 30 minutes · Security
• Cloudflare Turnstile — Cloudflare · Purpose: a privacy-friendly challenge that protects our forms from spam and abuse; may set a short-lived clearance token · Duration: session · Security
• fa-gate — First Arriving · Purpose: remembers access while the site is password-protected before launch (not used once live) · Duration: session · First-party

These help us measure and improve the site. They load only if you consent to Analytics, and the first-party ones are deleted if you withdraw consent.

• _ga — Google Analytics · Purpose: distinguishes unique visitors · Duration: 2 years
• _ga_<ID> — Google Analytics · Purpose: maintains GA4 session state · Duration: 2 years
• _gid — Google Analytics · Purpose: distinguishes visitors · Duration: 24 hours

We may load Google Analytics through Google Tag Manager. Provider: Google LLC; data may be processed in the United States.

These support advertising and measuring our campaigns. They load only if you consent to Marketing, and the first-party ones we can reach are deleted if you withdraw consent.

• _fbp — Meta (Facebook) · Purpose: ad delivery and measurement · Duration: 3 months · First-party
• fr — Meta, set on facebook.com · Purpose: ad delivery · Duration: 3 months · Third-party
• LinkedIn Insight Tag (bcookie, bscookie, lidc, li_gc, UserMatchHistory, AnalyticsSyncHistory) — LinkedIn · Purpose: ad delivery and conversion measurement · Duration: up to 2 years · Mostly set on linkedin.com
• _gcl_au — Google Ads · Purpose: measures ad conversions · Duration: 90 days

Providers: Meta Platforms, Inc.; LinkedIn Corporation (Microsoft); Google LLC. Data may be processed in the United States.

Some cookies and data are handled by third parties acting as our service providers. We load their tags only with your consent (except strictly-necessary security services).

• Google — analytics (Google Analytics) and advertising (Google Ads).
• Meta — advertising and measurement (Meta Pixel).
• LinkedIn — advertising and conversion measurement (Insight Tag).
• Cloudflare — content delivery and form/bot security (Turnstile).

We also share data with providers who do not set cookies on this website:

• HubSpot — our CRM and marketing platform. We send contact and lead information to HubSpot through its API; no HubSpot tracking script runs on this site, so it sets no cookies here.
• Resend — delivers our transactional and marketing email; it does not set cookies on this site.

You control Analytics and Marketing cookies and can change your mind at any time:

• Open your cookie settings: Manage cookie preferences — or use the “Cookie Preferences” link in the footer of any page.
• Choose by category: turn Analytics and Marketing on or off independently. Strictly-necessary cookies stay on because the site cannot function without them.
• Withdrawing actually removes cookies: when you turn a category off (or choose “Reject all”), we delete the first-party cookies in that category from your browser — not just stop setting new ones. Cookies set on a provider’s own domain (for example facebook.com or linkedin.com) are controlled by that provider; we stop loading their tags.
• Browser controls: you can also block or delete cookies in your browser settings. Blocking strictly-necessary cookies may stop parts of the site from working.

We honor browser-level opt-out signals. If your browser or a privacy extension sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, we automatically treat it as an opt-out of all non-essential cookies — you do not need to interact with the banner.

We ask for your consent before setting any non-essential (Analytics or Marketing) cookie, consistent with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA): non-essential cookies stay off until you opt in, and you can withdraw consent at any time using the controls above.

If you are in Quebec, Quebec’s Law 25 gives you additional rights regarding technologies that identify, locate, or profile you. Our consent controls let you refuse or withdraw consent for each non-essential category; to exercise any privacy right, contact us using the details below.

We may update this Cookie Policy as our site or the technologies we use change. When we do, we will revise the “last updated” date on this page, so please check back periodically.

Questions about this Cookie Policy or your privacy choices?

First Arriving IO, Inc.
9555 Kings Charter Drive, Suite K
Ashland, VA 23005

Email: getstarted@firstarriving.com
Phone: +1 (240) 667-7755