Politique de confidentialité

DEFINITIONS

In the following, capitalized words - whether singular or plural - are to be understood in accordance with the following definitions:

"User Account": Refers to the personal account that may be created by Users of the Site, in particular in order to place orders and/or follow training courses offered by the Data Controller.

"Personal Data" or "Data" means any information that directly or indirectly identifies a natural person, such as your surname, first name, e-mail address, postal address or telephone number.

"Data Subject": Any person whose Personal Data has been, is being or will be collected.

"Processor": Refers to CLUB LEGACYZ, a simplified joint stock company with share capital of €1,000, whose registered office is located at 12 Villa d'Eylau - 75116 Paris, registered with the Paris Trade and Companies Registry under number 904 344 165 (hereinafter CLUB LEGACYZ), represented by Mr Balthazar Théobald-Brosseau, acting and having the necessary powers as Chairman, which determines the purposes and means of the Processing of your Personal Data.

"Site": Refers to the website published by the Data Controller, accessible at [https://clublegacyz.com].

"Sub-Contractor": Refers to any individual or legal entity that processes Personal Data on behalf of the Data Controller, on its instructions and under its authority.

"Terminal": Refers to any equipment used by the User to access the Site.

"Processing": Refers to all operations relating to Personal Data, including but not limited to recording, collecting, organizing, storing, adapting or modifying, extracting, consulting, using, communicating by transmission, dissemination or any other form of making available, reconciling or interconnecting, as well as blocking, erasing or destroying, without this list being exhaustive.

"User": Refers to any person browsing the Site and/or using the Site.

INTRODUCTION

In the course of its commercial activity, the Data Controller may collect and process Data concerning you, for example when you create a User Account on the Site.

In its capacity as Data Controller, CLUB LEGACYZ has established this Personal Data Protection Policy (hereinafter the Policy) and undertakes to process such Data in accordance with the principles of transparency, identification and legitimacy of purposes, accuracy, proportionality and minimization, security and confidentiality, accountability and protection by design and default.

This Policy tells you how we collect and process your Data.

We invite you to read it carefully.

Important - We only use your Data in the cases provided for by the regulations in force in order to :
The performance of a contract we have entered into with you, and/or
Compliance with a legal or regulatory obligation, and/or
After obtaining your free, specific and informed consent to the use of your Data, and/or
The existence of a legitimate interest in using your Data. A legitimate interest is a set of commercial or business reasons that justifies CLUB LEGACYZ's use of your Data.  

We undertake to limit the collection of this Data to what is strictly necessary. It is reminded that this Data is collected at the initiative of CLUB LEGACYZ. Personal Data may also be collected at the initiative of the Data Subject.

This Privacy Policy explains the following issues:
The identity of the Data Controller
The information we collect
How we collect information
Why we collect information
With whom we share information
Where information is stored  
How long is the information stored?
How we protect information
Data breach
User rights
Minors
Data transfers abroad
Third-party websites
Treatment registers
Changes or updates to the Privacy Policy
Contact us


1) THE DATA CONTROLLER

The Personal Data that you transmit to us, have transmitted to us or which are collected in the context of the use of CLUB LEGACYZ are collected and processed, in its capacity as Processor by CLUB LEGACYZ, a simplified joint stock company, with a share capital of €1,000, whose registered office is located at 12 Villa d'Eylau - 75116 Paris, registered with the Paris Trade and Companies Register, under number 904 344 165.

In its capacity as data controller, CLUB LEGACYZ determines the means and purposes, i.e. the reasons, methods and conditions for Processing your Personal Data. 


2) THE INFORMATION WE COLLECT

In the course of its business, CLUB LEGACYZ may collect, directly from you and/or via the Website, in particular but not exclusively, the following information, some of which constitutes Personal Data:
Full name, pseudonym, title ;
Postal address, e-mail address, telephone number
IP address and associated location ;
Data relating to the opening and consultation of the Newsletter (number of times the Newsletter is opened, clicks on the links it contains).
Encrypted information about your means of payment (e.g. bank details, credit card, etc.) ;
Choice in commercial prospecting ;
Any other information you wish to share with us

3) HOW WE COLLECT INFORMATION

Information collection methods

You will find below the main methods we use to collect information about you:
We collect information when you use the Site. When you consult the Site, we may collect Data about your browsing, in particular by means of cookies and similar technologies (see below);
We collect information that you voluntarily provide to us. For example, we collect the information you provide when you create your User Account or when you contact us directly through any communication channel (for example, when you send us an e-mail containing a comment or feedback);
We may collect information from third party sources as described below;
We collect the information you provide if you access the Site through third-party services such as FACEBOOK, TWITTER, INSTAGRAM or GOOGLE.

Cookies and tracking technologies

We may use standard Internet technologies such as cookies, scripts, web beacons and redirects. When you visit or access our Site, we authorize certain third parties to use web beacons, cookies, web beacons, scripts, tags and other analysis technologies and services ("Tracking Technologies").

Applicable legislation authorizes us to store, without your authorization, the Tracking Technologies strictly necessary for the operation of the Site. For all other Tracking Technologies that we implement, we undertake to obtain your prior consent. You may modify or withdraw your consent to the installation on your Terminal of all or part of these Tracking Technologies at any time.

These Tracking Technologies may allow us and/or our partners to automatically collect information about you in order to improve and/or personalize your browsing experience, as well as for security and fraud prevention purposes.

These technologies give us access to the following information in particular:
Information about your use of our Site ;
Information on the presence of cookies on your terminal, the time and date of page consultation, and a description of the page on which the Web beacon is placed;
Information on whether or not you read the e-mails we send you, and on the clicks you make on the links contained in these e-mails.

We will not share your e-mail address, or any other Personal Information, with online advertising companies or ad networks without your express prior consent.

Through Tracking Technologies, we can also provide advertising that may be tailored to you, for example advertising that is based on your recent browsing behavior on different websites, browsers or Terminals.

In order to provide you with these advertisements, we may use cookies and/or JavaScript and/or web beacons (including invisible GIFs) and/or HTML5 local storage and/or other technologies. We may also use third parties, such as network advertisers, which are third parties that display advertisements based on your visits to the Websites, in order to present you with targeted advertisements. Third-party ad network providers, advertisers, sponsors and/or traffic measurement services may also use cookies and/or JavaScript and/or web beacons (including invisible GIFs) and/or Flash LSOs and/or other technologies to measure the effectiveness of their advertisements and personalize advertising content for you. These cookies and other third-party technologies are governed by each third party's specific privacy policy, not this one.

The Site is likely to record browsing cookies on your Terminal; these are necessary for browsing the Site and enable the Site to function properly.

Subject to your agreement, we are likely to deposit on your Terminal :
Audience measurement cookies: these enable us to track your browsing habits in order to compile consultation statistics and monitor the performance of the Site and each of its pages. These cookies enable us to improve our services and provide a better user experience. 

Targeting/advertising cookies: these are cookies used to offer the most appropriate content and advertising possible, taking into account your preferences and centers of interest.
You can change your consent to cookies at any time

4) WHY WE COLLECT YOUR DATA ?

CLUB LEGACYZ collects and uses your Personal Data for the following purposes:

Operations required to supply products or services

Registration process and creation of your User Account ;
Execution of any type of contract between you and us;
Invoicing; collection of payments; management of overdue payments and litigation;
Customer relations: a customer service department is available by post, telephone or e-mail for any questions or complaints;
Ordering and purchasing process ;
Satisfaction surveys;
Sending information about changes or developments in our services;
Management of the exercise of your rights to your Data, under the conditions set out in article 11 below;
Verification of compliance with applicable legislation, our contracts and general conditions of use.

Marketing and business development operations

Updating, enriching and de-duplicating your personal information in our database;
Sending information about our business;
Sending of commercial prospecting and/or promotional mail, when you have given your consent;
Analysis of our customers to determine our content and advertising campaigns, personalized or not, by e-mail and on all networks;
Loyalty-building actions or personalized commercial prospecting, in particular by sending exclusive content;
Compilation of sales statistics.


Operations linked to commercial partnerships

Sharing, exchanging or renting files with commercial partners in compliance with current regulations and security requirements
Sending marketing, advertising and promotional messages about partners' products and services via e-mail, mobile notifications, social networks or any other medium;
Setting up competitions or other promotional operations or events with commercial partners.



5) WITH WHOM DO WE SHARE INFORMATION?

Internal CLUB LEGACYZ recipients

CLUB LEGACYZ employees in the Customer Relations, Administration, Accounting and Controlling, IT and Marketing & Sales departments, who are authorized to process Data, may have access to some of your Data.

Access to your Data is based on individual and limited access authorizations. Personnel with access to Personal Data are bound by an obligation of confidentiality (by a nominal and personal undertaking of confidentiality).

Subcontractors

In the course of our business, we use Subcontractors. We inform Users in writing of any changes concerning the addition or replacement of Subcontractors.

We exercise particular vigilance in the selection of Subcontractors who process Personal Data on our behalf. We undertake to ensure that Subcontractors present identical guarantees of confidentiality and security and that the Processing operated by them is carried out in compliance with the regulations in force, and in particular the RGPD.


Our subcontractors provide services on our behalf, including :
Supply and hosting of the Site and its contents ;
Maintenance operations and technical developments;
Customer feedback ;
Provision of analytical solutions or audience measurement statistics;
Consulting and deployment of marketing actions;
Online payment solution ;


Our Subcontractors' access to your Data is based on signed contracts specifying their obligations in terms of Data protection, security and confidentiality. We ensure that our Subcontractors operate one or more Data Processing operations that comply with this Policy.

Social networking platforms

The use of social networks to interact with our Site (in particular the access buttons to our FACEBOOK, INSTAGRAM, TWITTER, DISCORD pages, etc. ) , is likely to lead to exchanges of Data between CLUB LEGACYZ and these social networks.

For example, if you are connected to the INSTAGRAM social network and consult a page of our Site, META may collect this information.

We therefore invite you to consult the personal data management policies of the various social networks to find out about the collection and processing they carry out on your Data.


Our sales partners

They promote products or services on their own behalf or on behalf of advertisers. We have no control over the collection or Processing of your Data by our commercial partners on their own platform and invite you to consult their policy on the Processing of Personal Data.


Police, judicial and administrative authorities

Where we are legally required to do so or in order to safeguard CLUB LEGACYZ's rights, property and safety, we may also disclose your information in the following circumstances:

(i) to investigate, detect, prevent or take action regarding illegal activities or other wrongdoing, suspected fraud or security matters ;
(ii) to establish or exercise our rights of defence against legal claims ;
(iii) to protect our rights, property or personal safety and those of our Users or the general public;
(iv) if we or any of our affiliates undergo a change of control, including through a merger, acquisition or purchase of all or substantially all of our assets.

Sharing your information in this way is not a regular event, but may occur at any time. We will endeavour to limit the types and volumes of information we may have to share for legal purposes to that which is reasonably necessary and will ensure that any transfer outside the European Union is made on an appropriate legal basis.

6) WHERE IS THE INFORMATION STORED?

Non-personal information

Please note that our servers, as well as the partners and service providers we trust, are located worldwide. Any non-personal data we collect is stored and processed mainly in France, but also in various jurisdictions around the world, for the purposes detailed in this Privacy Policy.

Personal Data

Personal Data may be kept, processed and stored in France and in other territories of the European Union if this is necessary for the proper provision of our services and/or if required by law.

By way of exception, Data may sometimes be transferred outside the European Union. Please refer to Article 12, which deals specifically with this subject, to find out how we proceed in such cases.

7) HOW LONG ARE DATA STORED?

In its capacity as Data Controller, CLUB LEGACYZ undertakes to comply with the retention periods imposed by the regulations in force.  

We apply the principle of limiting data retention periods in order to retain Personal Data only for as long as is strictly necessary to achieve the purposes of Processing, it being specified that what is necessary depends on specific circumstances, such as regulations requiring information to be retained for a specific period or prescription periods for legal disputes. Where a limitation period is imposed by law, the retention period may not be shorter.

Your Personal Data is kept for a period that complies with legal provisions or is proportionate to the purposes for which it was collected. Certain retention periods are in the legitimate interest of the Data Controller.

The table below lists the main retention periods for your Data.

Data Categories	Goals	Shelf life
Technical data
Data set	Operation of the Site, browsing functionalities and preservation of the User's configuration choices	6 months after collection
User account data
Data set	Allow access to the User Account	3 years from last connection
Data relating to orders placed on the Site
Data set	Enable order fulfillment, after-sales service and complaint management	5 years from order date
Data of our newsletter subscribers
Identification and contact data (newsletter subscribers)	Sending information on the evolution of our offers	Until unsubscription
Recruitment data
Data set	Recruitment management	If your application is successful: For the duration of your employment contract, plus the statutory retention period.
		If your application is rejected: 1 year from the date of rejection, unless you object.
Data collected via cookies
Cookies	Advertising targeting and sending of information and prospective offers	13 months from receipt of consent
Data aggregated via cookies	Preparing statistics	24 months from receipt of consent

8) HOW DO WE PROTECT INFORMATION?

As Data Controller, we implement appropriate technical and organizational measures in accordance with applicable legal provisions, to protect your Personal Data against any breach.  

A Data breach within the meaning of the RGPD constitutes a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, Personal Data transmitted, stored or otherwise processed.

In accordance with current regulations, CLUB LEGACYZ undertakes to respect the principles of security, confidentiality and integrity of Personal Data collected from Users.

Privacy

CLUB LEGACYZ undertakes to maintain the confidentiality of Personal Data with respect to its staff, collaborators and any person likely to have access thereto.

CLUB LEGACYZ personnel authorized to have access to Personal Data undertake to respect confidentiality and may be subject to a legal or contractual obligation of confidentiality. Similarly, authorized personnel have received the necessary training in the protection of Personal Data.

CLUB LEGACYZ may propose limiting the Personal Data collected, anonymizing such Data or resorting to pseudonymization.

Safety measures implemented

CLUB LEGACYZ implements appropriate technical and organizational measures to guarantee a level of security appropriate to the risk.

CLUB LEGACYZ relies on a combination of several levels of security. Measures can be human, physical or logical to contribute to the security of its information systems.

In terms of human safety , the measures implemented by CLUB LEGACYZ include:
Training sessions to make CLUB LEGACYZ staff aware of the fundamental knowledge regarding the protection of Personal Data in general and the RGPD in particular;
Appointment of a Data Protection Officer ( DPO ) // Data Protection Officer
Team support from the Data Protection Officer, who is in regular contact with CLUB LEGACYZ staff.


In terms of physical security, the measures implemented by CLUB LEGACYZ include:
Password-protected FTP server, regularly updated;
Access and privilege management: only administrators can grant access to data from a computer or server;
Use of a secure personal wifi code;
Perimeter security components such as firewalls and proxies filter access to CLUB LEGACYZ resources.

In terms of logical security, the measures implemented by CLUB LEGACYZ include:
Setting up computers, servers and cell phones according to an identical protocol that takes into account the latest versions of ;
Protection of servers and computers with regularly updated anti-virus software;
Encryption of all employee laptop hard drives.

CLUB LEGACYZ intends to give priority to storing Data within the European Union or, at the very least, to storage solutions in countries outside the European Union that offer sufficient guarantees, in compliance with current legislation.

CLUB LEGACYZ's DPO/Data Protection Officer is systematically involved in new IT projects likely to modify the Processing of Personal Data: creation of new functionalities, change of software solution, change of Personal Data hosting medium, etc. This organization favors the deployment of the "Privacy by design" principle. This organization favors the deployment of the "Privacy by design" principle.

9) DATA BREACH

In the event of a breach of Personal Data, CLUB LEGACYZ undertakes to promptly inform the CNIL under the conditions prescribed by the RGPD.

If such breach poses a high risk to the Data Subjects and the Personal Data has not been adequately protected, CLUB LEGACYZ will notify the Data Subjects and provide the necessary information and recommendations.

10) MINORS

Our products and services are intended for adults capable of entering into contractual obligations. Users who are minors must obtain the consent of their legal guardians prior to the communication of Personal Data concerning them.

If you have reason to believe that a minor has shared information with us, please contact us as indicated below.

11) USER RIGHTS

In accordance with Regulation (EU) 2016/679 on the protection of Personal Data, known as the RGPD adapted into French law by Law No. 2018-493 of June 20, 2018, and Law No. 78-17 of January 6, 1978 known as the Loi informatique et libertés, you have the following rights to your Data:

Right to information

CLUB LEGACYZ undertakes to inform Users of the Site of the collection and use of Personal Data and thus to provide clear, transparent and accessible information on the terms and conditions of the collection and Processing of Personal Data.

Right of access

You have a right of access to obtain information on the existence of a Processing operation and its methods.

Right of rectification

You may request the Data Controller to rectify your Data, in particular if it is incomplete and/or out of date.

CLUB LEGACYZ may, where applicable, oppose the request on the grounds of a legitimate interest or compelling reasons where the applicable legislation so provides.

Right to erasure ("right to be forgotten")

Subject to the regulations in force, and in particular to the exceptions (for example, with regard to the retention necessary to comply with a legal obligation), you may request the deletion of Personal Data relating to you:

When Personal Data are not or are no longer necessary for the purposes for which they were collected or otherwise processed ;
When you withdraw the consent on which the Processing is based and no other legal basis for the Processing exists;
When you consider that the Processing of your Personal Data constitutes an Unlawful Processing ;
Where Personal Data must be erased by virtue of a legal obligation provided for by Union law or the law of the Member State to which CLUB LEGACYZ is subject, i.e. France;
Where you have objected to the Processing of Data and CLUB LEGACYZ has no legitimate or compelling reason to refuse your request.

The Data Controller shall be the sole judge of the merits of any request and may, where applicable, oppose the request on the grounds of legitimate interest or overriding reasons where this is provided for by the applicable legislation.

For example, CLUB LEGACYZ may validly object to the destruction of Data contained in accounting documents, their retention period being fixed by law.

Right to object

You have the right to object at any time, for reasons relating to your particular situation, to the Processing of Personal Data concerning you.

The right to object is limited in particular by CLUB LEGACYZ's legitimate interest in processing Personal Data and other legal requirements - such as compelling reasons.

You have the right not to be subject to a decision based exclusively on automated Processing, including profiling, producing legal effects concerning them or significantly affecting them in a similar way.

Right to restrict processing

Under certain conditions, you can obtain from CLUB LEGACYZ the limitation of the Processing of your Data:
When the accuracy of your Personal Data is contested, and for a period that allows the Data Controller to verify the accuracy of the Data;
When the Processing is unlawful and you object to the erasure of your Data and demand, instead, the limitation of the Processing;
When the Data is no longer necessary for the purposes for which it was collected, but you need it to establish, exercise or defend legal claims;
When you object to a Processing conducted by CLUB LEGACYZ and based on its legitimate interest, CLUB LEGACYZ may continue the Processing for the duration of the verification aimed at determining whether the legitimate reasons pursued by CLUB LEGACYZ in the context of the Processing prevail over yours.

Right to portability

You may obtain from CLUB LEGACYZ the Personal Data previously provided to the Data Controller in a structured, commonly used and machine-readable format.

Under the right to portability, you may also transmit this Data to another Controller or request that your Personal Data be directly transmitted by CLUB LEGACYZ to another Controller, if this is technically possible.

Right to withdraw consent

You may, using the means provided by CLUB LEGACYZ for this purpose, withdraw your consent at any time when your Personal Data is processed on the basis thereof.

Withdrawal of consent is valid only for the future, and does not call into question the lawfulness of Processing carried out prior to such withdrawal.

Post-mortem rights

You have the right to formulate directives concerning the conservation, deletion and communication of your post-mortem Data.

Right to lodge a complaint with a supervisory authority

Users of the Site may exercise the aforementioned rights with CLUB LEGACYZ, by sending a request by e-mail to DPO /Responsible for Data Protection at the following e-mail address support@clublegacyz.com or by post to the following address: 136 rue d'aboukir, 75002 Paris.

CLUB LEGACYZ may request a copy of proof of identity in all cases where it considers that your identity is not sufficiently established, or that there is or may be reasonable doubt as to the identity of the person making the request. The level of checks carried out by CLUB LEGACYZ when processing requests to exercise rights will vary according to the nature of the requests, the sensitivity of the information communicated and the context in which the request is made.

CLUB LEGACYZ undertakes to respond to all requests as quickly as possible, and in any event within one (1) month of receipt of the complete request. However, this period may be extended by two (2) months in view of the complexity and number of requests.

CLUB LEGACYZ's Data Protection Officer is available to answer any questions Users may have about the technologies and procedures deployed to protect all Personal Data transmitted and stored via the Internet, in accordance with the requirements of the CNIL and the European Union.

Where appropriate, Site Users and Data Subjects may lodge a complaint with the Commission Nationale Informatique et Libertés (CNIL), or electronically on the website www.cnil.fr or by post to the following address:

CNIL - Complaints department
3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07
Tel: 01 53 73 22 22

12) DATA TRANSFERS ABROAD

As part of the provision of the Site, we do not intend to transfer information to affiliated entities or other third parties beyond the borders of your country or jurisdiction, to other countries or jurisdictions in the world. However, in the event that we do make such a transfer, by using the Site, you consent to the transfer of your information outside the European Union.

If you are located in the European Union, your Personal Data may only be transferred to locations outside the European Union if we are satisfied that an adequate or comparable level of protection is in place to protect the Personal Data.

We will take reasonable steps to ensure that we have appropriate contractual arrangements with our third parties to ensure that adequate safeguards are in place so that the risks of unlawful use, alteration, deletion, loss or theft of your Personal Data are minimized, and that such third parties act at all times in compliance with applicable laws. These measures may include seeking adequacy rulings, compliance with standard or specific contractual clauses of the European Commission, internal company rules (BCR) or approved certification and code of conduct mechanisms.

13) THIRD-PARTY WEBSITES

The Site may contain links, particularly hypertext links, and/or offers from partners to third-party websites.

We will not exercise any control over the content of third-party websites or the practices of such third parties with respect to the protection of any Personal Data they may collect, and we disclaim any responsibility for such content. It is your responsibility to inform yourself about the Personal Data protection policies of these third parties.

CLUB LEGACYZ is not responsible for this Data Processing, nor is it in a position to control or restrict it.

You can consult META's privacy policy by following this link: https://www.facebook.com/privacy/policy.

14) TREATMENT REGISTER

We undertake to keep an up-to-date register of all Processing activities carried out.

This register is a document or application that lists all the Data Processing operations that we carry out as a Data Controller.

We undertake to provide the supervisory authority, on first request, with information enabling the said authority to verify that the Processing complies with current data protection regulations.

15) CHANGES AND/OR UPDATES TO THE PRIVACY POLICY

We may revise this Privacy Policy from time to time at our sole discretion, and the most current version will always be posted on our website (as indicated at the top hereof). We encourage you to periodically review this Privacy Policy for any changes.

In the event of material changes, we will publish a notice that will be displayed distinctively within the Site, via a "pop-up" window or banner, to announce such changes. Your continued use of the Site following the posting of changes on our website will constitute your acknowledgement of, and consent to, such changes to the Privacy Policy and your agreement to be bound by the terms of such changes.

16) CONTACT US

If you have any general questions about the Site or the information we collect about you, or about how we use it, you can contact us by e-mail at support@clublegacyz.com.

 

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

[Be sure to check this list against Shopify’s current list of cookies on the merchant storefront: https://www.shopify.com/legal/cookies ]

Cookies Necessary for the Functioning of the Store

Name	Function	Duration
_ab	Used in connection with access to admin.	2y
_secure_session_id	Used in connection with navigation through a storefront.	24h
_shopify_country	Used in connection with checkout.	session
_shopify_m	Used for managing customer privacy settings.	1y
_shopify_tm	Used for managing customer privacy settings.	30min
_shopify_tw	Used for managing customer privacy settings.	2w
_storefront_u	Used to facilitate updating customer account information.	1min
_tracking_consent	Tracking preferences.	1y
c	Used in connection with checkout.	1y
cart	Used in connection with shopping cart.	2w
cart_currency	Used in connection with shopping cart.	2w
cart_sig	Used in connection with checkout.	2w
cart_ts	Used in connection with checkout.	2w
cart_ver	Used in connection with shopping cart.	2w
checkout	Used in connection with checkout.	4w
checkout_token	Used in connection with checkout.	1y
dynamic_checkout_shown_on_cart	Used in connection with checkout.	30min
hide_shopify_pay_for_checkout	Used in connection with checkout.	session
keep_alive	Used in connection with buyer localization.	2w
master_device_id	Used in connection with merchant login.	2y
previous_step	Used in connection with checkout.	1y
remember_me	Used in connection with checkout.	1y
secure_customer_sig	Used in connection with customer login.	20y
shopify_pay	Used in connection with checkout.	1y
shopify_pay_redirect	Used in connection with checkout.	30 minutes, 3w or 1y depending on value
storefront_digest	Used in connection with customer login.	2y
tracked_start_checkout	Used in connection with checkout.	1y
checkout_one_experiment	Used in connection with checkout.	session
checkout_session_lookup	Used in connection with checkout.	3w
checkout_session_token_<<token>>	Used in connection with checkout.	3w
identity-state	Used in connection with customer authentication.	24h
identity-state-<<token>>	Used in connection with customer authentication.	24h
identity_customer_account_number	Used in connection with customer authentication.	12w

Reporting and Analytics

Name	Function	Duration
_landing_page	Track landing pages.	2w
_orig_referrer	Track landing pages.	2w
_s	Shopify analytics.	30min
_shopify_d	Shopify analytics.	session
_shopify_s	Shopify analytics.	30min
_shopify_sa_p	Shopify analytics relating to marketing & referrals.	30min
_shopify_sa_t	Shopify analytics relating to marketing & referrals.	30min
_shopify_y	Shopify analytics.	1y
_y	Shopify analytics.	1y
_shopify_ga	Shopify and Google Analytics.	session
customer_auth_provider	Shopify analytics.	session
customer_auth_session_created_at	Shopify analytics.	session

[INSERT OTHER COOKIES OR TRACKING TECHNOLOGIES THAT YOU USE]

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioural Advertising” section above.

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.