Privacy policy

PRIVACY E COOKIE POLICY

This Website collects some Personal Data from its Users.

This document can be printed for reference by using the print command in the settings of any browser.

OWNER AND DATA CONTROLLER

Angela Russo

Partita Iva 16342321003

Owner contact email: info@mirtillajewels.com

TYPES OF DATA COLLECTED

Among the types of Personal Data that this Website collects, by itself or through third parties, there are: Tracker; Usage Data; first name; last name; billing address; shipping address; phone number; payment info; device information; email address; date of birth; physical address; profession; country; purchase history; city; ZIP/Postal code; Data communicated while using the service.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Website.
Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide its services. In cases where this Website specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools – by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.

Users are responsible for any third-party Personal Data obtained, published or shared through this Website and confirm that they have the third party's consent to provide the Data to the Owner.

MODE AND PLACE OF PROCESSING THE DATA

METHODS OF PROCESSING

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

LEGAL BASIS OF PROCESSING

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes. Note: Under some legislations the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply, whenever the processing of Personal Data is subject to European data protection law;

• provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;

• processing is necessary for compliance with a legal obligation to which the Owner is subject;

• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner;

• processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

PLACE

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.

Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.

Users are also entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

If any such transfer takes place, Users can find out more by checking the relevant sections of this document or inquire with the Owner using the information provided in the contact section.

RETENTION TIME

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.

• Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

THE PURPOSES OF PROCESSING

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Analytics, SPAM protection, Displaying content from external platforms, Platform services and hosting, Managing contacts and sending messages, Remarketing and behavioral targeting, Managing data collection and online surveys and Advertising.

For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data”.

DETAILED INFORMATION ON THE PROCESSING OF PERSONAL DATA

Personal Data is collected for the following purposes and using the following services:

ADVERTISING

This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
Some of the services listed below may use Trackers to identify Users or they may use the behavioral retargeting technique, i.e. displaying ads tailored to the User’s interests and behavior, including those detected outside this Website. For more information, please check the privacy policies of the relevant services.
In addition to any opt-out feature offered by any of the services below, Users may opt out by visiting the Network Advertising Initiative opt-out page.

Users may also opt-out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or ads settings in general.

FACEBOOK LOOKALIKE AUDIENCE (FACEBOOK IRELAND LTD)

Facebook Lookalike Audience is an advertising and behavioral targeting service provided by Facebook Ireland Ltd that uses Data collected through Facebook Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the base of their past use of this Website or engagement with relevant content across the Facebook apps and services.
On the base of these Data, personalized ads will be shown to Users suggested by Facebook Lookalike Audience.

Users can opt out of Facebook's use of cookies for ads personalization by visiting this opt-out page.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

ANALYTICS

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

GOOGLE ANALYTICS (GOOGLE IRELAND LIMITED)

Google Analytics is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

FACEBOOK ADS CONVERSION TRACKING (FACEBOOK PIXEL) (FACEBOOK IRELAND LTD)

Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Facebook Ireland Ltd that connects data from the Facebook advertising network with actions performed on this Website. The Facebook pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Audience Network.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy.

DISPLAYING CONTENT FROM EXTERNAL PLATFORMS

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

MANAGING CONTACTS AND SENDING MESSAGES

This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

MANAGING DATA COLLECTION AND ONLINE SURVEYS

This type of service allows this Website to manage the creation, deployment, administration, distribution and analysis of online forms and surveys in order to collect, save and reuse Data from any responding Users.
The Personal Data collected depend on the information asked and provided by the Users in the corresponding online form.

These services may be integrated with a wide range of third-party services to enable the Owner to take subsequent steps with the Data processed - e.g. managing contacts, sending messages, analytics, advertising and payment processing.

FACEBOOK LEAD ADS (FACEBOOK IRELAND LTD)

Facebook lead ads is an advertising and data collection service provided by Facebook Ireland Ltd that allows form-based ads to be shown to Users pre-populated with Personal Data from their Facebook profiles, such as names and email addresses. Depending on the type of advertisement, Users may be requested to provide further information.

Form submission results in the collection and processing of these Data by the Owner under this privacy policy, and only for the specific purpose outlined on the form and/or inside this privacy policy, where provided.

Users may exercise their rights, at any time, including the right to withdraw their consent to the processing of their Data, as specified in the section containing information about User rights in this privacy policy.

Personal Data processed: city; country; Data communicated while using the service; date of birth; email address; first name; last name; phone number; physical address; Usage Data; ZIP/Postal code.

Place of processing: Ireland – Privacy Policy – Opt out.

PLATFORM SERVICES AND HOSTING

These services have the purpose of hosting and running key components of this Website, therefore allowing the provision of this Website from within a unified platform. Such platforms provide a wide range of tools to the Owner – e.g. analytics, user registration, commenting, database management, e-commerce, payment processing – that imply the collection and handling of Personal Data.
Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.

Shopify

Shopify is a platform provided by Shopify Inc. that allows the Owner to build, run and host an e-commerce website.

Personal Data processed: billing address; device information; email address; first name; last name; payment info; phone number; shipping address; Tracker; Usage Data.

Place of processing– Privacy Policy.

REMARKETING AND BEHAVIORAL TARGETING

This type of service allows this Website and its partners to inform, optimize and serve advertising based on past use of this Website by the User.
This activity is facilitated by tracking Usage Data and by using Trackers to collect information which is then transferred to the partners that manage the remarketing and behavioral targeting activity.
Some services offer a remarketing option based on email address lists.
In addition to any opt-out feature provided by any of the services below, Users may opt out by visiting the Network Advertising Initiative opt-out page.

Users may also opt-out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or ads settings in general.

FACEBOOK REMARKETING (FACEBOOK IRELAND LTD)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that connects the activity of this Website with the Facebook advertising network.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

SPAM PROTECTION

This type of service analyzes the traffic of this Website, potentially containing Users' Personal Data, with the purpose of filtering it from parts of traffic, messages and content that are recognized as SPAM.

GOOGLE RECAPTCHA (GOOGLE IRELAND LIMITED)

Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy.

PAYMENT

INVOICE OR DATA FOR PAYMENT: STRIPE , PAYPAL

THE RIGHTS OF USERS

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, Users have the right to do the following:

• Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.

• Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.

• Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.

• Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.

• Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.

• Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.

• Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User's consent, on a contract which the User is part of or on pre-contractual obligations thereof.

• Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

DETAILS ABOUT THE RIGHT TO OBJECT TO PROCESSING

Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. To learn, whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.

HOW TO EXERCISE THESE RIGHTS

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month.

COOKIE POLICY

This Website uses Trackers. To learn more, the User may consult the Cookie Policy.

ADDITIONAL INFORMATION ABOUT DATA COLLECTION AND PROCESSING

LEGAL ACTION

The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Website or the related Services.
The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

ADDITIONAL INFORMATION ABOUT USER'S PERSONAL DATA

In addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

SYSTEM LOGS AND MAINTENANCE

For operation and maintenance purposes, this Website and any third-party services may collect files that record interaction with this Website (System logs) use other Personal Data (such as the IP Address) for this purpose.

INFORMATION NOT CONTAINED IN THIS POLICY

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

HOW “DO NOT TRACK” REQUESTS ARE HANDLED

This Website does not support “Do Not Track” requests.
To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.

CHANGES TO THIS PRIVACY POLICY

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Website and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.

DEFINITIONS AND LEGAL REFERENCES

PERSONAL DATA (OR DATA)

Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.

USAGE DATA

Information collected automatically through this Website (or third-party services employed in this Website), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Website, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

USER

The individual using this Website who, unless otherwise specified, coincides with the Data Subject.

DATA SUBJECT

The natural person to whom the Personal Data refers.

DATA PROCESSOR (OR DATA SUPERVISOR)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

DATA CONTROLLER (OR OWNER)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the Owner of this Website.

THIS WEBSITE (OR THIS APPLICATION)

The means by which the Personal Data of the User is collected and processed.

SERVICE

The service provided by this Website as described in the relative terms (if available) and on this site/application.

EUROPEAN UNION (OR EU)

Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookies are Trackers consisting of small sets of data stored in the User's browser.

TRACKER

Tracker indicates any technology - e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of Users, for example by accessing or storing information on the User’s device.

LEGAL INFORMATION

This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates solely to this Website, if not stated otherwise within this document.

Latest update: April 12, 2022

COOKIE POLICY OF WWW.MIRTILLAJEWELS.COM

This document informs Users about the technologies that help this Website to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with this Website.

For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.

Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.

This Website uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information – such as the presence of other Trackers - in the linked privacy policies of the respective third-party providers or by contacting the Owner.

ACTIVITIES STRICTLY NECESSARY FOR THE OPERATION OF THIS WEBSITE AND DELIVERY OF THE SERVICE

This Website uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.

THIRD-PARTY TRACKERS

SPAM PROTECTION

GOOGLE RECAPTCHA (GOOGLE IRELAND LIMITED)

Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.

Personal Data processed: Tracker and Usage Data.

Place of processing: Ireland – Privacy Policy.

Storage duration:

• _GRECAPTCHA: duration of the session

• rc::a: indefinite

• rc::b: duration of the session

• rc::c: duration of the session

PLATFORM SERVICES AND HOSTING

Shopify

Shopify is a platform that allows the Owner to build, run and host an e-commerce website.

Personal Data processed: billing address, device information, email address, first name, last name, payment info, phone number, shipping address, Tracker and Usage Data.

Place of processing Ireland – Privacy Policy.

What are cookies?

A cookie is a small amount of information that’s downloaded to your computer or device when you visit certain websites. We use a number of different cookies on the Shopify website, including strictly necessary, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor. Read more about cookies (and other similar tracking technologies) and how we use the data collected through these technologies, in our Privacy Policy.

What cookies do we use and why?

Some cookies are necessary to allow you to browse our website, use its features, and access secure areas. The use of these cookies is essential for the website to work. For example, we use user-input cookies for the duration of a session to keep track of a user’s input when filling in forms that span several pages.

We also use functional cookies to remember choices you’ve made or information you’ve provided, such as your username, language, or the region you are in. This allows us to tailor your website experience specifically to your preferences. For example, authentication cookies are functional cookies that are used for the duration of a session (or persistent, if you agree to the “remember me” function) to allow users to authenticate themselves on subsequent visits or to gain access to authorized content across pages. The functional cookies we use include:

• User-centric security cookies to detect authentication abuses for a limited persistent duration, like repeated failed login attempts. These cookies are set for the specific task of increasing thesecurity of the service.

• Multimedia content player session cookies (flash cookies) are used for the duration of a session to store technical data needed to play back video or audio content (e.g. image quality, network link speed, and buffering parameters).

• Load balancing session cookies are used for the duration of the session to identify the same server in the pool in order for the load balancer to redirect user requests appropriately.

• User interface customization persistent cookies are used to store a user’s preference regarding a service across web pages.

Shopify is dedicated to user experience and we use many tools to help us improve our website and our commerce platform. To this end, we use reporting and analytics cookies to collect information about how you use our website or our merchants’ storefronts, and how often. These cookies only gather information for statistical purposes and only use pseudonymous cookie identifiers that do not directly identify you. The performance cookies we use include:

• First party analytics cookies - We use these cookies to estimate the number of unique visitors, to improve our websites and our merchants’ websites, and to detect the most searched for words in search engines that lead to a webpage. These cookies are not used to target you with online marketing. We use these cookies to learn how our websites and our merchants’ websites are performing and make relevant improvements to improve your browsing experience.

• Third party analytics cookies - We also use Google Analytics and other third-party analytics providers listed below to help measure how users interact with our website content. These cookies “remember” what our users have done on previous pages and how they’ve interacted with the website. For more information on Google Analytics, visit Google’s information page. For instructions on how to opt out of Google Analytics, see below.

Advertising cookies are used on our website to tailor marketing to you and your interests and provide you with a more personalized service in the future. These cookies remember that you visited our website and we may share this information with third-parties, such as advertisers. Although these cookies can track your device’s visits to our website and other sites, they typically cannot personally identify you. Without these cookies, the advertisements that you see may be less relevant and interesting to you. Read more about how companies use cookies to conduct targeted or retargeted advertising here. We do not set advertising cookies through our merchants’ storefronts ourselves, though merchants may choose to do so independently.

Finally, Social and Content cookies are placed by many social media plugins (for example the Facebook ’like’ button), and other tools meant to provide or improve the content on a website (for example services that allow the playing of video files, or that create comments sections). We integrate these modules into our platform to improve the experience of browsing and interacting with our websites. Please note that some of these third party services place cookies that are also used for things like behavioural advertising, analytics, and/or market research.

Merchant storefronts

When merchants use our platform to power their online stores, we place the following cookies for visitors of their stores:

Cookies Necessary for the Functioning of the Store:

Name	Function	Duration
_ab	Used in connection with access to admin.	2y
_customer_account_shop_sessions	Used in combination with the _secure_account_session_id cookie to track a user's session for new customer accounts	30d
_secure_account_session_id	Used to track a user's session for new customer accounts	30d
_secure_session_id	Used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected.	24h
_shopify_country	For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request.	session
_shopify_m	Used for managing customer privacy settings.	1y
_shopify_tm	Used for managing customer privacy settings.	30min
_shopify_tw	Used for managing customer privacy settings.	2w
_storefront_u	Used to facilitate updating customer account information.	1min
_tracking_consent	Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.	1y
_cmp_a	Used for managing customer privacy settings.	1d
c	Used in connection with checkout.	1y
cart	Used in connection with shopping cart.	2w
cart_currency	Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.	2w
cart_sig	A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations.	2w
cart_ts	Used in connection with checkout.	2w
cart_ver	Used in connection with shopping cart.	2w
checkout	Used in connection with checkout.	4w
checkout_token	Used in connection with checkout.	1y
customer_account_locale	Used in connection with new customer accounts	1y
dynamic_checkout_shown_on_cart	Used in connection with checkout.	30min
hide_shopify_pay_for_checkout	Used in connection with checkout.	session
keep_alive	Used in connection with buyer localization.	2w
master_device_id	Used in connection with merchant login.	2y
previous_step	Used in connection with checkout.	1y
discount_code	Used in connection with checkout.	session
remember_me	Used in connection with checkout.	1y
secure_customer_sig	Used to identify a user after they sign into a shop as a customer so they do not need to log in again.	1y
shopify_pay	Used in connection with checkout.	1y
shopify_pay_redirect	Used in connection with checkout.	1 hour, 3w or 1y depending on value
shop_pay_accelerated	Used in connection with checkout.	1y
source_name	Used in combination with mobile apps to provide custom checkout behavior, when viewing a store from within a compatible mobile app.	session
storefront_digest	Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.	2y
tracked_start_checkout	Used in connection with checkout.	1y
checkout_session_lookup	Used in connection with checkout.	3w
checkout_prefill	Used in connection with checkout.	5m
checkout_queue_token	Used in connection with checkout.	1y
checkout_queue_checkout_token	Used in connection with checkout.	1y
checkout_worker_session	Used in connection with checkout.	3d
checkout_session_token	Used in connection with checkout.	3w
checkout_session_token_<<token>>	Used in connection with checkout.	3w
cookietest	Used to ensure our systems are working correctly	1m
order	Used in connection with order status page.	3w
identity-state	Used in connection with customer authentication	24h
identity-state-<<token>>	Used in connection with customer authentication	24h
identity_customer_account_number	Used in connection with customer authentication	12w
card_update_verification_id	Used in connection with checkout.	20m
customer_account_new_login	Used in connection with customer authentication	20m
customer_account_preview	Used in connection with customer authentication	7d
customer_payment_method	Used in connection with checkout.	1h
customer_shop_pay_agreement	Used in connection with checkout.	20m
pay_update_intent_id	Used in connection with checkout.	20m
localization	Used in connection with checkout.	2w
profile_preview_token	Used in connection with checkout.	5m
login_with_shop_finalize	Used in connection with customer authentication	5m
preview_theme	Used in connection with the theme editor	session
shopify-editor-unconfirmed-settings	Used in connection with the theme editor	16h
wpm-test-cookie	Used to ensure our systems are working correctly.	session

Reporting and Analytics

Name	Function	Duration
_landing_page	Track landing pages.	2w
_orig_referrer	Track landing pages.	2w
_s	Shopify analytics.	30min
_shopify_d	Shopify analytics.	session
_shopify_fs	Shopify analytics.	30min
_shopify_s	Shopify analytics.	30min
_shopify_sa_p	Shopify analytics relating to marketing & referrals.	30min
_shopify_sa_t	Shopify analytics relating to marketing & referrals.	30min
_shopify_y	Shopify analytics.	1y
_y	Shopify analytics.	1y
_shopify_ga	Shopify and Google Analytics.	session
customer_auth_provider	Shopify analytics.	session
customer_auth_session_created_at	Shopify analytics.	session
unique_interaction_id	Shopify analytics.	10min

Shopify’s websites

When visitors load Shopify’s websites, we generally place the following Shopify cookies:

Cookies Necessary for the Functioning of the Sites

Name	Function	Duration
_Brochure_session	Used in connection with browsing through site.	-
checkout	Used in connection with Pay checkout on shop.app.	3w
signed_in	Used in connection with Shop login.	1y
user	Used in connection with Shop login.	1y

Reporting and Analytics

Name	Function
_landing_page	Tracks landing pages.
_orig_referrer	Tracks landing pages.
_s	Shopify analytics.
_session_id	Shopify analytics
_shopify_s	Shopify analytics.
_shopify_sa_t	Shopify analytics relating to marketing & referrals.
_shopify_uniq	Shopify analytics.
_shopify_y	Shopify analytics.
_y	Shopify analytics.
*_assignment	Shopify analytics
ab_test_*	Shopify analytics.
cart_sig	Shopify analytics.
ki_r	Shopify analytics.
ki_t	Shopify analytics.

Additionally, we use pixels and tags from the following third parties, which may in turn place cookies:

Cookies Necessary for the Functioning of the Sites

Third Party	Description	Privacy Policy
Cloudflare	Shopify uses Cloudflare Network as a Service for edge routing.	https://www.cloudflare.com/privacypolicy/

Reporting & Analytics

Third Party	Description	Privacy Policy
Alexa Metrics	We use Alexa Metrics to help measure how users interact with our websites.	https://www.alexa.com/help/privacy
Bizible	We use Bizible to help measure how users interact with our websites.	https://documents.marketo.com/legal/privacy/
Chartbeat	We use Chartbeat to help measure how users interact with our websites.	https://chartbeat.com/privacy/
Crazy Egg	We use Crazy Egg to help measure how users interact with our websites.	https://www.crazyegg.com/privacy
Datadog RUM	We use Datadog RUM to help measure how users interact with our websites.	https://www.datadoghq.com/legal/privacy/
DC Analytics	We use DC Analytics to help measure how users interact with our websites.	https://dcanalytics.dcmn.com/privacy-policy
Facebook Pixel	We use Facebook Pixel to help measure how users interact with our websites.	https://www.facebook.com/privacy/explanation
Fullstory	We use Fullstory to help measure how users interact with our websites.	https://www.fullstory.com/legal/privacy/
Google Analytics	We use Google Analytics to help measure how users interact with our websites.	https://policies.google.com/privacy
Google Tag Manager	We use Google Tag Manager to help manage analytics vendors.	https://policies.google.com/privacy
Hotjar	We use Hotjar to help measure how users interact with our websites.	https://www.hotjar.com/legal/policies/privacy
iSpot	We use iSpot to help measure how users interact with our websites.	https://www.ispot.tv/terms-of-service
KissInsights	We use KissInsights to help measure how users interact with our websites.	https://signin.kissmetrics.com/privacy/
LinkedIn Insight Tag	We use LinkedIn Insight Tag to help measure how users interact with our websites.	https://www.linkedin.com/legal/privacy-policy
New Relic	We use New Relic to help measure how users interact with our websites.	https://newrelic.com/termsandconditions/privacy
Optimizely	We use Optimizely to help us test improvements or changes to our websites.	https://www.optimizely.com/privacy/
Pinterest Analytics	We use Pinterest Analytics to help measure how users interact with our websites.	https://policy.pinterest.com/privacy-policy
Segment	We use Segment to help measure how users interact with our websites.	https://segment.com/legal/privacy/
Snapchat	We use Snapchat to help measure how users interact with our websites.	https://snap.com/privacy/privacy-policy
Taboola	We use Taboola to help measure how users interact with our websites.	https://www.taboola.com/policies/privacy-policy
Tealium	We use Tealium to help manage analytics vendors.	https://tealium.com/privacy/
TikTok	We use TikTok to help measure how users interact with our websites.	https://www.tiktok.com/legal/privacy-policy?lang=en
Twitter	We use Twitter to help measure how users interact with our websites.	https://twitter.com/en/privacy
Yelp Audience Platform	We use Yelp to help measure how users interact with our websites.	https://terms.yelp.com/privacy/en_us/20200101_en_us/

Advertising

Third Party	Description	Privacy Policy
Microsoft Advertising	We use Microsoft Advertising to deliver targeted advertisements to individuals who visit our websites.	https://privacy.microsoft.com/en-ca/privacystatement
Drift	We use Drift to help us with conversational marketing to customers while they visit our websites.	https://www.drift.com/privacy-policy/
Facebook Custom Audiences	We use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites.	https://www.facebook.com/policy.php
Google	We use Google Ads to deliver targeted advertisements to individuals who visit our websites.	https://policies.google.com/privacy
Hubspot	We use Hubspot to manage our relationships with our customers.	https://legal.hubspot.com/privacy-policy
Intercom	We use Intercom to manage our relationships with our customers.	https://www.intercom.com/terms-and-policies#privacy
Marketo	We use Marketo to manage our relationships with our customers.	https://documents.marketo.com/legal/privacy/
Outbrain	We use Outbrain to deliver targeted advertisements to individuals who visit our websites.	https://www.outbrain.com/privacy
Quora	We use Quora to deliver targeted advertisements to individuals who visit our websites.	https://www.quora.com/about/privacy
Reddit	We use Reddit Ads to deliver targeted advertisements to individuals who visit our websites.	https://www.reddit.com/help/privacypolicy
SourceKnowledge	We use SourceKnowledge to deliver targeted advertisements to individuals who visit our websites.	http://www.sourceknowledge.com/privacy
Yahoo Japan Ads	We use Yahoo Japan Ads to deliver targeted advertisements to individuals who visit our websites.	https://about.yahoo.co.jp/common/terms/

Social Media & Content

Third Party	Description	Privacy Policy
Disqus	We use Disqus to provide commenting capabilities on posts on our websites.	https://help.disqus.com/terms-and-policies/disqus-privacy-policy
Facebook Connect	We use Facebook Connect to allow visitors to our website to interact with and share content via Facebook’s social media platform.	https://www.facebook.com/policy.php
Gravatar	We use Gravatar to allow visitors to our websites to create avatars.	https://en.gravatar.com/site/privacy
Twitter	We use Twitter to allow visitors to our website to interact with and share content via Twitter’s social media platform.	https://twitter.com/en/privacy
Wistia	We use Wistia to display video content.	https://wistia.com/privacy

Oberlo websites

When visitors load Oberlo’s websites, we generally place the following Oberlo cookies:

Cookies Necessary for the Functioning of the Sites

Name	Function
oberlo_session	Used in connection with navigation through an app.
shippingCountry	Used in connection with navigation through an app. For product exploration, calculating shipping price.
user_locale	Used in connection with customer login. For storing language chosen in log-in page.
hideFufilmentBanner	Used in connection with navigation through an app.
hideBulkOrderingFeatureBanner	Used in connection with navigation through an app.
hideChangePlanBannerBulkFulfillment	Used in connection with navigation through an app.
hideBanner101	Used in connection with navigation through an app.
alert_setup_notifications_1	Used in connection with navigation through an app.

Reporting and Analytics

Name	Function
conversion	Oberlo analytics.
conversion_leave	Oberlo analytics.
trackExtensionCheck	Oberlo analytics.
shopify_ref	Analytics relating to marketing & referrals. Referrals tracking.

Additionally, we use pixels and tags from the following third parties, which may in turn place cookies:

Reporting & Analytics:

Third Party	Description	Privacy Policy
Loggly	We use Loggly to help us troubleshoot and fix issues with our websites.	https://www.loggly.com/about/privacy-policy/
Sleeknote	We use Sleeknote to measure how people interact with our website.	https://sleeknote.com/privacy-policy
Inspectlet	We use Inspectlet to help measure how users interact with our websites.	https://www.inspectlet.com/terms-of-service
Google Analytics	We use Google Analytics to help measure how users interact with our websites.	https://policies.google.com/privacy
Fullstory	We use Fullstory to help measure how users interact with our websites.	https://www.fullstory.com/legal/privacy/
KissInsights	We use KissInsights to help measure how users interact with our websites.	https://signin.kissmetrics.com/privacy/
Optimizely	We use Optimizely to help us test improvements or changes to our websites.	https://www.optimizely.com/privacy/
LinkedIn Insight Tag	We use LinkedIn Insight Tag to help measure how users interact with our websites.	https://www.linkedin.com/legal/privacy-policy
Tapfiliate	We use Tapfiliate to help measure how users interact with our websites.	https://tapfiliate.com/privacy/privacy-policy/

Advertising:

Third Party	Description	Privacy Policy
Microsoft Advertising	We use Microsoft Advertising to deliver targeted advertisements to individuals who visit our websites.	https://privacy.microsoft.com/en-ca/privacystatement
Facebook Custom Audiences	We use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites.	https://www.facebook.com/policy.php
Google	We use Google Ads to deliver targeted advertisements to individuals who visit our websites.	https://policies.google.com/privacy
Intercom	We use Intercom to manage our relationships with our customers.	https://www.intercom.com/terms-and-policies#privacy

Social Media & Content:

Third Party	Description	Privacy Policy
Disqus	We use Disqus to provide commenting capabilities on posts on our websites.	https://help.disqus.com/terms-and-policies/disqus-privacy-policy
Facebook Connect	We use Facebook Connect to allow visitors to our website to interact with and share content via Facebook’s social media platform.	https://www.facebook.com/policy.php
Gravatar	We use Gravatar to allow visitors to our websites to create avatars.	https://en.gravatar.com/site/privacy
Youtube	We use Youtube to display video content.	https://policies.google.com/privacy?hl=en-US
Wistia	We use Wistia to display video content.	https://wistia.com/privacy
AddThis	We use AddThis to display social share capabilities on the website.	https://www.addthis.com/privacy/terms-of-service
Twitter	We use Twitter to allow visitors to our website to interact with and share content via Twitter’s social media platform.	https://twitter.com/en/privacy
Kajabi	We use Kajabi to serve Oberlo 101 course material.	https://kajabi.com/policies/privacy

How long will cookies remain on my computer or mobile device?

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device. See the section below on how to control cookies for more information on removing them before they expire.

How to control cookies?

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Many of the third party advertising and other tracking services listed above offer you the opportunity to opt out of their tracking systems. You can read more about the information they collect and how to opt out through the privacy policy links listed above.

OTHER ACTIVITIES INVOLVING THE USE OF TRACKERS

MEASUREMENT

This Website uses Trackers to measure traffic and analyze User behavior with the goal of improving the Service.

ANALYTICS

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

GOOGLE ANALYTICS (GOOGLE IRELAND LIMITED)

Personal Data processed: Tracker and Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

Storage duration: up to 2 years

FACEBOOK ADS CONVERSION TRACKING (FACEBOOK PIXEL) (FACEBOOK IRELAND LTD)

Personal Data processed: Tracker and Usage Data.

Place of processing: Ireland – Privacy Policy.

Storage duration:

• _fbp: 3 months

• fr: 3 months

TARGETING & ADVERTISING

This Website uses Trackers to deliver personalized marketing content based on User behavior and to operate, serve and track ads.

ADVERTISING

This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
Some of the services listed below may use Trackers to identify Users or they may use the behavioral retargeting technique, i.e. displaying ads tailored to the User’s interests and behavior, including those detected outside this Website. For more information, please check the privacy policies of the relevant services.
Services of this kind usually offer the possibility to opt out of such tracking. In addition to any opt-out feature offered by any of the services below, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section "How to opt-out of interest-based advertising" in this document.

FACEBOOK LOOKALIKE AUDIENCE (FACEBOOK IRELAND LTD)

Users can opt out of Facebook's use of cookies for ads personalization by visiting this opt-out page.

Personal Data processed: Tracker and Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

Storage duration:

• _fbp: 3 months

REMARKETING AND BEHAVIORAL TARGETING

Users may also opt-out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or ads settings in general.

FACEBOOK REMARKETING (FACEBOOK IRELAND LTD)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that connects the activity of this Website with the Facebook advertising network.

Personal Data processed: Tracker and Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

Storage duration:

• _fbp: 3 months

HOW TO MANAGE PREFERENCES AND PROVIDE OR WITHDRAW CONSENT

There are various ways to manage Tracker related preferences and to provide and withdraw consent, where relevant:

Users can manage preferences related to Trackers from directly within their own device settings, for example, by preventing the use or storage of Trackers.

Additionally, whenever the use of Trackers is based on consent, Users can provide or withdraw such consent by setting their preferences within the cookie notice or by updating such preferences accordingly via the relevant consent-preferences widget, if available.

It is also possible, via relevant browser or device features, to delete previously stored Trackers, including those used to remember the User’s initial consent.

Other Trackers in the browser’s local memory may be cleared by deleting the browsing history.

With regard to any third-party Trackers, Users can manage their preferences and withdraw their consent via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.

LOCATING TRACKER SETTINGS

Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

• Google Chrome

• Mozilla Firefox

• Apple Safari

• Microsoft Internet Explorer

• Microsoft Edge

• Brave

• Opera

Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).

HOW TO OPT OUT OF INTEREST-BASED ADVERTISING

Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI(Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.

OWNER AND DATA CONTROLLER

Angela Russo

Partita Iva 16342321003

Owner contact email: info@mirtillajewels.com

Since the use of third-party Trackers through this Website cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.

Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by this Website.

DEFINITIONS AND LEGAL REFERENCES

PERSONAL DATA (OR DATA)

USAGE DATA

USER

The individual using this Website who, unless otherwise specified, coincides with the Data Subject.

DATA SUBJECT

The natural person to whom the Personal Data refers.

DATA PROCESSOR (OR DATA SUPERVISOR)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

DATA CONTROLLER (OR OWNER)

THIS WEBSITE (OR THIS APPLICATION)

The means by which the Personal Data of the User is collected and processed.

SERVICE

The service provided by this Website as described in the relative terms (if available) and on this site/application.

EUROPEAN UNION (OR EU)

Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookies are Trackers consisting of small sets of data stored in the User's browser.

TRACKER

LEGAL INFORMATION

This privacy statement has been prepared based on provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates solely to this Website, if not stated otherwise within this document.

Latest update: 9 November, 2023

Item added to your cart

Privacy policy

Country/region

Language