Cookie Policy
Palera Milano — paleramilano.com
Last updated: 30/06/2026
This Cookie Policy is the single, authoritative source for how Palera Milano S.r.l. uses cookies and similar tracking technologies on this website. It should be read alongside our Privacy Policy, which explains more broadly how we handle your personal data.
1. What Are Cookies and Similar Technologies?
Cookies are small text files placed on your device when you visit our website. They let the Site remember your preferences, keep your cart working, and — where you have agreed — help us understand how you use the Site and show you relevant advertising elsewhere on the web.
We also use related technologies with a similar function, including:
- Pixels and web beacons — small pieces of code from advertising and analytics partners that record when a page or email is opened.
- Local storage — data your browser stores locally, used in a similar way to cookies by some of our apps.
For simplicity, we refer to all of these collectively as “cookies” in this Policy.
1.1 First-Party and Third-Party Cookies
First-party cookies are set directly by us to operate the Site. Third-party cookies are set by our analytics and advertising partners — currently Google, Microsoft, Meta, TikTok, Pinterest, and Klaviyo — and are governed by those partners’ own privacy practices as well as this Policy.
2. How We Ask for Your Consent
When you first visit paleramilano.com, a cookie banner appears before any non-essential cookie is placed on your device. You have two clear, equally weighted choices:
- Accept All — enables all cookies described in this Policy, including analytics and advertising cookies.
- Reject Non-Essential — only strictly necessary cookies are used. You can still browse, add items to your cart, and complete your purchase. No analytics, marketing, or retargeting cookie is set.
Both options are presented with equal visual prominence; we do not use design techniques that make rejecting cookies harder to find or use than accepting them. No box is pre-ticked, and simply continuing to browse the Site does not count as consent — we only treat your choice as valid once you have made an active selection in the banner.
You can change your mind at any time by clicking “Cookie Settings” in the website footer. Updated preferences take effect immediately for any new page you load.
We keep a record of the consent choice you make (what you agreed to and when) so that we can demonstrate compliance with the law, as required by Art. 5(2) GDPR.
2.1 Global Privacy Control and Do Not Track
Some browsers and extensions send an automated opt-out preference signal, such as Global Privacy Control (GPC). Where our Site detects a GPC signal, we treat it as a valid request to opt out of non-essential cookies in the same way as selecting “Reject Non-Essential” in our banner, and as a valid opt-out of “sale” or “sharing” for the purposes of US state privacy laws such as the CCPA/CPRA.
The older “Do Not Track” (DNT) browser setting is not yet governed by an agreed technical standard across browsers and regulators, so we do not currently respond to DNT signals specifically — please use our Cookie Settings tool or a GPC-enabled browser/extension for reliable control.
3. The Cookies We Use
3.1 Category A — Strictly Necessary Cookies (Always Active)
These cookies are essential for the Site to function — for example, to keep your cart contents, secure checkout, and remember your cookie preferences. They do not require consent and cannot be switched off, as without them core features like checkout would not work.
| Cookie / Provider | Purpose | Origin | Expiry |
|---|---|---|---|
| _shopify_essential, _shopify_s, _shopify_y, shopify_pay, visitorStartTime | Core Shopify cookies securing checkout, sessions, and payments | EU/US (Shopify) | Session–1 yr |
| cart, cart_currency | Stores your cart contents and preferred currency | First-party | 2 yrs |
| localization | Remembers your country/region for shipping and currency display | First-party | 1 yr |
| transcy_cookie_locale, transcy_has_redirect_language, transcy_tracking_location, transcy_tracking_token | Placed by Transcy to display the Site in your preferred language | Third-party (Transcy) | Session–1 yr |
| tinycookie, tinycookie_acc | Remembers your cookie consent choices | First-party (TinyCookie) | 1 yr |
| agentID | Maintains chat/support ticket continuity with customer service tools | Third-party | Session |
3.2 Category B — Analytics & Performance Cookies (Opt-In Required)
These cookies are not set until you choose “Accept All” or specifically opt in via Cookie Settings. They help us understand how visitors use the Site so we can improve it.
| Cookie / Provider | Purpose | Data Sent To | Expiry |
|---|---|---|---|
| _ga, _ga_LY14685LJ6, _ga_YTRRPDGWS7 (Google Analytics 4) | Tracks store traffic, page views, and user journeys in aggregate | Google LLC, USA (Data Privacy Framework) | 13 mo |
| _clck, _clsk (Microsoft Clarity) | Generates anonymised heatmaps and session recordings to identify usability issues | Microsoft Corp., USA (Data Privacy Framework) | 1 yr |
| _shopify_analytics, shopify_client_id | Shopify’s own store-visit and sales dashboard analytics | Shopify (EU/US) | 2 yrs |
Data collected in this category is aggregated or pseudonymised behavioural data (pages viewed, time on site, device type). It is not combined with your name or contact details unless you have also consented to marketing tracking.
3.3 Category C — Marketing & Retargeting Cookies (Opt-In Required)
These cookies track your activity across different websites so that we and our advertising partners can show you advertisements relevant to your interests, and measure how well our campaigns perform. They are blocked by default and only load if you select “Accept All.”
| Cookie / Provider | Purpose | Data Shared | Data Sent To | Expiry |
|---|---|---|---|---|
| __kla_id, __kla_session (Klaviyo) | Identifies newsletter subscribers, triggers abandoned-cart and post-purchase emails | Email (if subscribed), purchase history, browsing behaviour | Klaviyo, USA (SCCs) | 2 yrs |
| _fbp, _fbc (Meta Pixel) | Enables Facebook/Instagram advertising and measures campaign performance | Pseudonymous ID, pages/products viewed, purchases | Meta, USA (Data Privacy Framework) | 3 mo |
| _ttp, ttcsid (TikTok Pixel) | Measures and optimises TikTok advertising performance | Pseudonymous ID, pages viewed, purchase events | TikTok / ByteDance group (SCCs) | 13 mo |
| _pin_unauth (Pinterest Tag) | Measures conversions from Pinterest ads and builds audience segments | Pseudonymous ID, product views | Pinterest, USA (SCCs) | 1 yr |
| _gcl_au (Google Ads) | Measures which ads drive sales and website actions | Conversion data, device type | Google LLC, USA (Data Privacy Framework) | 3 mo |
This data is used by us and our advertising partners only for advertising and measurement purposes. We do not sell this data for money. Each platform listed acts as an independent controller for the data it processes through its own pixel — please see Section 4 for links to their respective privacy policies.
Note on TikTok: because TikTok is part of the ByteDance group, data shared through the TikTok Pixel may be processed in jurisdictions subject to differing regulatory scrutiny. We only enable this pixel where you have actively consented, and you can disable it at any time via Cookie Settings.
4. Our Vendors and Their Privacy Practices
| Vendor | Role | Their Privacy Policy |
|---|---|---|
| Shopify | Hosting, checkout, and payment processing | shopify.com/legal/privacy |
| Google (Analytics & Ads) | Site analytics and advertising measurement | policies.google.com/privacy |
| Microsoft (Clarity) | Behavioural analytics (heatmaps, session recordings) | privacy.microsoft.com |
| Meta / Facebook | Advertising and pixel tracking | facebook.com/privacy |
| TikTok | Advertising and pixel tracking | tiktok.com/legal/privacy |
| Advertising and pixel tracking | policy.pinterest.com/privacy | |
| Klaviyo | Email marketing and automation | klaviyo.com/privacy |
| Transcy | Translation and localisation | transcy.com/privacy-policy |
5. Your Rights Regarding Cookies, by Region
5.1 EU, UK, and EEA (GDPR / UK GDPR)
- Access the personal data we have collected via cookies
- Correct inaccurate information
- Delete your data (“right to be forgotten”)
- Restrict or object to processing, including profiling
- Receive your data in a portable, machine-readable format
- Withdraw consent at any time, free of charge and as easily as you gave it
To exercise these rights, email clientservice@paleramilano.com with “GDPR Request” in the subject line, or use the Cookie Settings tool for immediate consent changes.
5.2 California (CCPA/CPRA)
- Know what personal information we collect and how we use it
- Delete your personal information, subject to limited legal exceptions
- Opt out of the “sale” or “sharing” of your personal information for cross-context behavioural advertising
- Non-discrimination for exercising any of these rights
To opt out of advertising cookies, select “Reject Non-Essential” in our banner, use Cookie Settings, enable a Global Privacy Control signal in your browser, or email clientservice@paleramilano.com.
5.3 Brazil (LGPD)
- Access, correct, and delete your data (subject to limited exceptions)
- Request data portability
- Withdraw consent at any time
Email clientservice@paleramilano.com with “LGPD Request” in the subject line.
5.4 Canada (PIPEDA)
You may request access to, or correction of, information collected through cookies by contacting clientservice@paleramilano.com.
6. Managing Cookies Through Your Browser
In addition to our Cookie Settings tool, you can control cookies through your browser:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Safari: Settings → Privacy → Prevent cross-site tracking / Block all cookies
- Firefox: Settings → Privacy & Security → Enhanced Tracking Protection
- Edge: Settings → Privacy, search, and services → Cookies
Blocking all cookies, including first-party ones, may prevent core features such as checkout from working. We recommend using our Cookie Settings tool, or blocking only third-party cookies in your browser, to preserve essential functionality.
7. Contact Us
Questions about an order in production, or a shipment already on its way? Our client service team is here to help.
Palera Milano S.r.l.
Via Vallarsa 26, 20139 Milan (MI), Italy
Email: clientservice@paleramilano.com
We have not appointed a statutory Data Protection Officer, as this is not currently mandatory for our processing activities. Privacy and cookie enquiries are handled by our dedicated client service team at the address above.
8. Updates to This Policy
We may update this Cookie Policy to reflect changes to the cookies we use, new legal requirements, or updates from our service providers. When we make a material change, we will post the updated Policy with a new “Last updated” date and, where required by law, re-trigger our consent banner so you can make a fresh choice.
9. Quick Summary
| Choice | Effect |
|---|---|
| Accept All | Full functionality, plus analytics and personalised advertising |
| Reject Non-Essential | Full shopping functionality, no analytics or advertising cookies |
| Cookie Settings (footer) | Change your preferences at any time |
| Browser settings | Fine-grained, technical control over individual cookies |
| Unsubscribe link | Opt out of marketing emails instantly |
This Policy applies to all versions of paleramilano.com, including mobile and desktop.