Last updated: August 24, 2026
For users in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply in particular to cookies and similar technologies. Australia does not have a separate, cookie-specific regulation identical to the EU ePrivacy Directive. However, cookies, local storage, tracking pixels, scripts, tags, and similar technologies are relevant under data protection law if they are used to collect, use, or disclose personal information as defined by the Privacy Act. Of particular relevance are APP 1 on the open and transparent management of personal information, APP 3 on the collection of personal information, APP 5 on notification of collection, APP 6 on use and disclosure, APP 7 on direct marketing, APP 8 on cross-border disclosure, and APP 11 on security. Technically necessary cookies may be used on a regular basis if they serve exclusively to ensure the secure and functional operation of the website and are described transparently. In contrast, analytics, tracking, marketing, profiling, and third-party technologies should only be used after clear, informed, and documented consent has been obtained, particularly when online identifiers, user behavior, form data, sensitive information, direct marketing, or cross-border transfers are involved.
| Cookie | Publicly Available Privacy Notice | Retention Period | Legal Basis in Australia |
|---|---|---|---|
| __cfruid | This cookie is used by the website hosting provider’s content delivery or security service provider to limit requests, prevent misuse, and ensure the website is provided in a stable and secure manner. | Until the end of the session. | Privacy Act 1988 and Australian Privacy Principles, specifically APP 1, APP 3, APP 5, and APP 11. Purpose: to ensure the secure, stable, and abuse-free operation of the website. No separate consent is required provided that the cookie is strictly necessary for technical purposes and is described transparently. |
| __cfuvid | This cookie is used by the website hosting provider’s content delivery or security service provider to limit requests and support the secure operation of the website. | Until the end of the session. | Privacy Act 1988 and APPs, specifically APP 1, APP 3, APP 5, and APP 11. Purpose: technical security, prevention of misuse, and website availability. |
| __cf_bm | This cookie is used to protect against automated access and bots. It helps detect and prevent abusive or technically harmful access to the website. | 30 minutes | Privacy Act 1988 and APPs, specifically APP 3, APP 5, and APP 11. Purpose: protection of the website infrastructure, fraud and abuse prevention, and security monitoring. |
| __hs_opt_out | This cookie records that a visitor has declined the use of non-essential cookies or should not be prompted for consent again. It contains the value “yes” or “no.” | 6 months | Privacy Act 1988 and APPs, specifically APP 1, APP 5, and APP 11. Purpose: To store and implement the cookie decision and to demonstrate transparent preference management. |
| __hs_do_not_track | This cookie may be set to prevent the tracking code from sending information to HubSpot. It stores the corresponding opt-out or “do not track” decision. | 6 months | Privacy Act 1988 and APPs, specifically APP 1, APP 5, APP 6, and APP 11. Purpose: Technical implementation of the opt-out from tracking and preservation of user preferences. |
| __hs_initial_opt_in | This cookie prevents the cookie banner from reappearing in strict mode every time a page is loaded. It contains the value “yes” or “no.” | 7 days | Privacy Act 1988 and APPs, specifically APP 1, APP 5, and APP 11. Purpose: user-friendly and transparent management of the cookie prompt. |
| __hs_cookie_cat_pref | This cookie stores which cookie categories the visitor has consented to or declined. It is used to manage cookie preferences. | 6 months | Privacy Act 1988 and APPs, specifically APP 1, APP 5, APP 6, and APP 11. Purpose: To store and implement the user’s decision to consent, decline, or set preferences. |
| __hs_gpc_banner_dismiss | This cookie records that the Global Privacy Control notification has been closed. It contains the value “yes” or “no.” | 180 days | Privacy Act 1988 and APPs, specifically APP 1, APP 5, and APP 11. Purpose: To manage privacy preferences and prevent repeated notifications. |
| __hs_notify_banner_dismiss | This cookie records that a “Notify” notification banner has been closed. It contains a Boolean value. | 180 days | Privacy Act 1988 and APPs, specifically APP 1, APP 5, and APP 11. Purpose: User-friendly management of technically necessary notifications. |
| hs_ab_test | This cookie is used to display the same version of an A/B test page to a visitor during a session that was previously assigned to them. | Until the end of the session. | Justifiable without consent only if the A/B testing serves exclusively to ensure the consistent technical delivery of the accessed page version and does not pursue any purposes related to analysis, audience measurement, optimization, marketing, personalization, or profiling. Legal basis: Privacy Act 1988 and APPs, in particular APP 1, APP 3, APP 5, and APP 11. Otherwise, clear and documented consent is required or strongly recommended. |
| wg-translations | This local storage entry is used by the translation feature to store translations that have already been loaded or generated in the browser and to display the website in the language selected by the user. | Depending on provider or browser configuration; specified in the document as “stored indefinitely.” Recommendation: Technically limit storage to a reasonable duration or transparently explain the option to delete. | Privacy Act 1988 and APPs, specifically APP 1, APP 3, APP 5, APP 8, and APP 11. Purpose: to provide the website in multiple languages and in a user-friendly manner. Due to unlimited storage, a proportionality and retention review is required. |
| wg-slugs | This local storage entry is used by the translation feature to store translated URLs in the browser and provide navigation in the selected language. | Depending on provider or browser configuration; specified in the document as “stored indefinitely.” Recommendation: Technically limit storage to a reasonable duration or transparently explain the option to delete. | Privacy Act 1988 and APPs, specifically APP 1, APP 3, APP 5, APP 8, and APP 11. Purpose: consistent language-based navigation. Due to unlimited storage, a proportionality and retention review is required. |
| wglang | This cookie stores the language selected by the user so that the website can be displayed in the preferred language. | Until the end of the session. | Privacy Act 1988 and APPs, specifically APP 1, APP 3, and APP 5. Purpose: To provide the language version selected by the user. |
These are non-essential cookies that are managed via the cookie banner. As a visitor to a HubSpot-powered website, you can object to the use of these cookies by not giving your consent.
| Cookie / Storage Entry | Publicly Available Privacy Notice | Retention Period | Legal Basis in Australia |
|---|---|---|---|
| __hmpl | This storage entry contains metadata on tracking events that HubSpot collects while you use the website. It is used to analyze website usage and is only used if the appropriate consent has been granted. | Session storage or local storage, depending on the consent and tracking configuration. | Privacy Act 1988 and APPs, specifically APP 1, APP 3, APP 5, APP 6, APP 8, and APP 11. Due to analytics and tracking purposes, the potential for personal identification, and third-party involvement, this cookie should only be used based on clear, informed, and documented consent. |
| hublytics_events_53 | This storage entry is temporarily used by HubSpot to store tracking events until they are technically transmitted. It is used for analytics purposes and is only deployed if appropriate consent has been granted. | Session storage or local storage, depending on the consent and tracking configuration. | Privacy Act 1988 and APPs, specifically APP 1, APP 3, APP 5, APP 6, APP 8, and APP 11. Tracking events must be described transparently; clear and documented consent should be obtained prior to their use. |
| __hstc | This HubSpot cookie is used to recognize and track visitors across multiple sessions. Specifically, it stores the domain, visitor ID, times of visits, and session numbers. | 6 months | Privacy Act 1988 and APPs. Consent is required or strongly recommended, as the cookie enables recognition, analysis, and potential tracking across multiple sessions. The purposes, providers, data categories, recipients, cross-border transfers, retention period, and option to withdraw consent must be explained transparently. |
| hubspotutk | This HubSpot cookie is used to recognize a visitor. It may be transmitted to HubSpot when a form is submitted and helps identify and merge duplicate contacts. | 6 months | Privacy Act 1988 and APPs, specifically APP 3, APP 5, APP 6, APP 7, APP 8, and APP 11. Due to visitor recognition, form and CRM mapping, and third-party integration, clear, informed, and documented consent should be obtained prior to use. |
| __hssc | This HubSpot cookie is used to track sessions and page views within a session. It supports the analysis of user behavior on the website. | 30 minutes | Privacy Act 1988 and APPs. Analytical purposes must be transparently explained in advance; in cases involving the analysis of personal data, third-party tracking, direct marketing, or profiling, use should only occur with consent. |
| __hssrc | This HubSpot cookie is set to determine whether a visitor has restarted their browser and whether a new session should be initiated. | Until the end of the session. | Privacy Act 1988 and APPs. If this cookie is part of HubSpot analytics tracking, it must be treated as an analytics cookie and should only be used with prior consent. |
| _ga | This Google Analytics 4 cookie is used to distinguish individual users and to compile statistical information about website usage. | By default, 2 years, subject to different browser limitations or a different configuration. | Privacy Act 1988 and APPs, specifically APP 1, APP 3, APP 5, APP 6, APP 7, APP 8, and APP 11. Due to user differentiation, recognition, third-party involvement, potential profiling, direct marketing implications, and cross-border transfers, this cookie should only be used after clear, informed, and documented consent has been obtained. |
| _ga_<Container-ID> | This Google Analytics 4 cookie is used to store the session status and to statistically analyze website usage. | By default, 2 years, subject to different browser limitations or a different configuration. | Privacy Act 1988 and APPs, specifically APP 1, APP 3, APP 5, APP 6, APP 8, and APP 11. Due to analysis, session tracking, third-party involvement, and potential cross-border transfers, this cookie should only be used with clear, informed, and documented consent. |
