This Cookie Policy explains how Teak & Marble Atelier, Ltd. uses cookies, analytics technologies, advertising pixels, and similar tools, what information these technologies collect, and how you can manage your choices. It applies to all visitors to our website regardless of location.
The following table identifies the specific cookies and tracking technologies currently in use on our website. This table is updated when our technology stack changes.
| Cookie / Technology | Provider | Category | Purpose | Duration | When Active |
|---|---|---|---|---|---|
| _shopify_session | Shopify | Strictly Necessary | Maintains shopping cart and checkout session | Session | Always |
| shopify_pay | Shopify | Strictly Necessary | Remembers payment preferences for returning customers | 1 year | Always |
| _shopify_y / _shopify_ga | Shopify | Analytics | Anonymous visitor analytics for store performance | 2 years | After consent |
| _ga / _ga_[ID] | Google (GA4) | Analytics | Identifies unique users and sessions for site analytics | 2 years | After consent |
| _gcl_au | Google Ads | Advertising | Advertising conversion tracking and remarketing tag | 90 days | After consent |
| _fbp / _fbc | Meta | Advertising | Meta Pixel — ad attribution, audience building, conversion measurement | 90 days / session | After consent |
| _ttp / _tt_enable_storage | TikTok | Advertising | TikTok Pixel — ad attribution and campaign optimization | 13 months | After consent |
| _klarna_cookie | Klarna | Strictly Necessary | Supports Klarna checkout flow and fraud prevention | Session | When Klarna is used |
| stripe_sid | Stripe | Strictly Necessary | Stripe payment security and fraud prevention | Session | When Stripe is used |
| consent_record | TMA (CMP) | Strictly Necessary | Records your cookie consent choices and timestamp | 1 year | Always |
| Category | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Site operation, cart, checkout, payment processing, security, consent recording | Not required — essential to site function |
| Analytics | Performance measurement, page usage, visitor trends, conversion tracking | before activation |
| Advertising / Remarketing | Ad measurement, retargeting, audience creation, campaign optimization | before activation |
| Functional | Preference memory, enhanced site features | before activation |
| Fraud Prevention / Security | Payment verification, risk screening, abuse detection | Not required — essential for secure operations |
We do not activate non-essential cookies or tracking scripts until you have provided affirmative consent through our cookie banner. Strictly necessary cookies, including those required for shopping cart functionality, checkout processing, payment security, and consent recording, operate without prior consent as they are essential to the service you have requested.
On your first visit, our cookie banner presents you with clear, equal-weight options to Accept All, Reject Non-Essential, or Manage Preferences by category. The option to reject non-essential cookies requires the same number of steps as accepting them. We do not use dark patterns, pre-checked boxes, or design that discourages rejection.
You may withdraw or update your consent at any time by clicking Cookie Settings in the website footer. Withdrawal takes effect immediately for active sessions.
We maintain records of cookie consent decisions through our consent management platform. Consent logs capture the timestamp of consent or withdrawal, the policy version presented to you at the time, the categories you accepted or rejected, and a session identifier where lawful. These records are maintained to satisfy our burden of proof obligations under applicable law, including GDPR Article 7 and Quebec Law 25.
We use Google Analytics 4 (GA4) to better understand how visitors use our website. GA4 may collect data such as IP address, device and browser information, page views, site interactions, referring URLs, approximate geographic information, and session and conversion data.
For visitors from the European Union, United Kingdom, European Economic Area, and Switzerland, we implement Google Consent Mode v2. This ensures that GA4 and Google Ads tags operate in a consent-aware mode — collecting only data permitted by your consent choices. If you have not consented to analytics or advertising cookies, these tags will not fire in a way that identifies you or contributes to remarketing lists.
We use Google Ads and remarketing features to measure campaign performance and to serve ads to users who have previously visited our website. The Google Ads remarketing tag is activated only after advertising consent has been received from the user. Google Consent Mode v2 governs tag behavior for EU, UK, EEA, and Switzerland visitors.
We use Meta and TikTok tracking technologies to measure advertising performance, understand audience activity, build custom or lookalike audiences, and improve campaign targeting and conversion measurement. These pixels process browsing activity, page visits, cart events, and purchase signals. Both pixels are activated only after advertising consent has been received.
United States
We operate primarily in the United States. For California residents, analytics and advertising practices may constitute the sale or sharing of personal information under CCPA/CPRA. You may opt out using the Do Not Sell or Share My Personal Information link in the website footer, or by selecting Reject Non-Essential in our cookie banner. We also recognize Global Privacy Control (GPC) signals as a valid opt-out mechanism.
Canada — PIPEDA and Quebec Law 25
Canadian visitors are protected by PIPEDA at the federal level. Quebec residents are protected by Quebec's Law 25, which requires explicit opt-in consent before any tracking technology is activated. Our cookie consent mechanism satisfies this requirement — no non-essential cookies fire until you affirmatively consent. This applies to GA4, Meta Pixel, TikTok Pixel, and Google Ads remarketing tags. You may withdraw consent at any time through the Cookie Settings link.
European Union and European Economic Area
The EU ePrivacy Directive and GDPR require prior informed consent before setting non-essential cookies on EU visitors' devices. Our consent mechanism satisfies these requirements. Consent must be freely given, specific, informed, and unambiguous. We do not rely on legitimate interest as a basis for analytics or advertising cookies. All non-essential scripts remain blocked until you opt in. You may withdraw consent at any time. Consent logs are maintained per GDPR Article 7.
United Kingdom
UK visitors are protected by the UK GDPR and PECR (Privacy and Electronic Communications Regulations). Our consent mechanism satisfies PECR's prior-consent requirement for non-essential cookies. Note: The Data (Use and Access) Act 2025 (DUAA), which received Royal Assent on 19 June 2025, introduces a potential exemption for first-party analytics cookies used solely for site improvement, where a clear opt-out mechanism is provided. To the extent this exemption applies to GA4 first-party analytics in the UK, we will implement it in accordance with ICO guidance. Third-party advertising pixels remain subject to prior consent under PECR regardless of the DUAA.
Questions about this Policy may be directed to: [email protected]