Cookie Policy

This Cookie Policy explains how Upstream BPO uses cookies and similar technologies on upstreambpo.com. It should be read alongside the Privacy Policy and the broader data-protection notices linked from the Trust Centre.

Cookies and similar technologies can support essential site functions, remember consent choices and, where enabled and consented, load analytics or marketing tags.

Essential technologies are used for functions such as authentication, session continuity, workspace or portal access, request validation, security controls and related site operation. These are required for the site to work properly and are not optional in the same way as analytics or marketing tags.

Session or authentication cookies may be used to maintain access to protected areas such as workspace and portal flows. The exact lifetime of those session mechanisms can vary depending on the purpose, the browser and the relevant authentication flow.

The site records your cookie-consent choice through the upstream_consent cookie so the website can remember whether optional categories have been accepted or rejected.

The consent state is used server-side to decide whether optional analytics or marketing scripts should be emitted into the page at all. If the applicable consent has not been granted, those optional scripts are not loaded.

When enabled in the current site configuration and allowed by your consent choice, analytics capabilities may include GA4 and Google Tag Manager. These technologies help measure website usage, content performance and related operational insights.

If the relevant analytics consent has not been granted, those analytics tags are not loaded through the current public-site tag-rendering path.

When enabled in the current site configuration and allowed by your consent choice, marketing or advertising capabilities may include Meta Pixel, LinkedIn Insight, TikTok Pixel, Microsoft UET and Google Ads.

These technologies are optional and are consent-gated in the current website implementation. This means the site has advertising and cross-site measurement capability when those providers are enabled and consented; it does not mean they load by default for every visitor.

Depending on the browser and feature involved, similar technologies may include browser storage and tag-managed scripts needed for the categories described above. The current public site no longer uses the retired upstream-session-context-v1 personalization storage.

You can change or withdraw your consent at any time through the Cookie preferences link in the site footer, or directly at /cookie-preferences. Both surfaces write the same consent record, and withdrawing a category takes effect on the next page load. You can also manage cookies through your browser settings. Blocking essential cookies may affect authentication, workspace access or other core site functions.

For questions about cookies or consent, contact privacy@upstreambpo.com. For broader personal-data handling questions, see the Privacy Policy and PDPA / Malaysia Data Protection pages.

The table below lists every cookie this site sets, and every cookie that would be set if an administrator enabled one of the approved tag templates. Rows marked Active are in use today. Rows marked Templated set nothing until the provider is enabled and the visitor grants the stated category. Third-party durations are the providers’ own published defaults.