Cookie Policy
Version 1.0, last updated: November 4, 2026
Versione italiana1. Purpose and scope
1.1 This Cookie Policy explains which cookies and similar technologies are used on the website www.torrinijewels.com (the "Site"), for what purposes, and how the User may give, refuse or withdraw consent at any time.
1.2 It forms an integral part of the Privacy Policy, to which reference is made for the identity of the Controller, the legal bases of processing, retention periods and the rights of data subjects under Articles 15 to 22 GDPR.
1.3 The Controller is Torrini 1369 s.r.l., with registered office at Piazza del Duomo 12/R, 50122 Florence, Italy, contactable at info@torrinijewels.com.
2. What cookies and similar technologies are
2.1 A cookie is a small text file that a site stores on the User's device and reads on subsequent visits. Equivalent purposes are served by other techniques, in particular browser local storage, which this Site also uses; where this document says "cookie" it means both, because the legal treatment under Article 5(3) of the ePrivacy Directive is the same.
2.2 Cookies may be set by the Site itself ("first party") or by a third party whose content the page loads ("third party"). They may last only for the browsing session ("session") or persist for a defined period ("persistent").
3. Consent: how it is collected and how it is withdrawn
3.1 On first access from the European Economic Area and the United Kingdom, the Site displays a consent banner offering, with equal prominence, the options Accept, Decline and Manage preferences. No non-essential cookie is set before the User has made a choice.
3.2 The choice may be changed at any time, with no loss of function, through the Cookie preferences control in the footer of every page and in the mobile menu, which reopens the preferences panel.
3.3 Withdrawing consent takes effect immediately: the live chat is shut down without a page reload. Where a third party has already been contacted during the session, withdrawal prevents any further contact but cannot retroactively undo a transfer that has already occurred. A map already displayed stays on the page, and may still contact Google's servers if it is used, until the next page is loaded; from then on it is no longer loaded.
3.4 The consent choice itself is recorded in a strictly necessary cookie. That cookie is set whichever choice is made, including a refusal, because it is what allows the Site not to ask again.
3.5 Outside the European Economic Area and the United Kingdom the banner is not displayed and the optional categories are active from the first visit; the Cookie preferences control described in paragraph 3.2 remains available to refuse them. Residents of the United States may also object to the sale or sharing of their personal information through the Your Privacy Choices page linked in the footer, which can be used from the U.S. states concerned, or by enabling the Global Privacy Control signal in their browser, which the Site recognises automatically. Reference is made to the Privacy Policy, section 14.
4. Categories used on this Site
4.1 The preferences panel offers four categories, corresponding to the purposes described in the Privacy Policy. Where the panel uses a different label, that label is shown in brackets:
- Strictly necessary (Required) — required for the Site to function. These do not require consent and cannot be disabled.
- Preferences (Personalization) — remember choices made by the User and enable functional third-party content, such as the map and the live chat.
- Analytics — measure how the Site is used, in aggregate.
- Marketing — support advertising and the measurement of advertising campaigns.
5. Cookies and technologies currently in use
5.1 Strictly necessary. Cookies set by Shopify International Ltd, the platform on which the Site runs, to maintain the session, the shopping cart and the checkout, to remember the country and language selected, and to record the consent choice described in paragraph 3.4: _shopify_essential (session, checkout and consent choice; 1 year), localization (country and language; 1 year), cart and cart_currency (contents and currency of the cart, set when an item is added) and __cf_bm (protection against automated traffic, set when the cart is used and during checkout; 30 minutes). In the customer account area, which is hosted by Shopify, _shopify_essential is also set on the shopify.com domain. The consent cookie is flagged HttpOnly and is therefore not readable by scripts running on the page. _shopify_essential and localization are set on every visit, including one where all optional categories have been refused. Shopify also stores a technical flag of the platform in the browser's local storage (shopify:webmcp_adapter_loaded).
5.2 Preferences — live chat (Chatra). Provided by Chatra (Roger Wilco LLC). Stores identifiers in the browser's local storage in order to associate a conversation with the same visitor across pages. It is loaded only after consent to the Preferences category, and is shut down on withdrawal.
5.3 Preferences — map (Google Maps). Provided by Google Ireland Ltd. Displays the boutique location on the contact page and involves a connection to Google servers, which discloses the User's IP address. It is loaded only after consent to the Preferences category. Until then the page shows a notice in its place, and the boutique address remains available as text.
5.4 Strictly necessary — wishlist. The Site stores the items the User chooses to save in the browser's local storage on the device in use. This storage serves only the function requested by the User and therefore works independently of the choices expressed in the preferences panel. This information is not associated with an account and is never transmitted to the Maison or to any third party.
5.5 Analytics — Shopify. The platform's own aggregate audience measurement, used to produce the statistics available to the Maison in the Shopify administration interface.
5.6 Analytics — Google Analytics 4. Provided by Google Ireland Ltd. Measures, in aggregate, how the Site is visited and which pages and products are viewed, including completed purchases. Google's tag is installed through Shopify's Google & YouTube channel and is shared with the tools described in paragraph 5.7. If neither the Analytics nor the Marketing category is accepted, including before a choice is made and after a refusal, Google's tag sends nothing to Google and sets no cookie. If the Analytics category is accepted, Google Analytics sets the cookies listed in section 6. If only the Marketing category is accepted, Google Analytics sets no cookie but receives from the tag signals without cookies, which report the page viewed and the refusal of the Analytics category (Google's "consent mode").
5.7 Marketing — Google Ads and Google Merchant Center. Provided by Google Ireland Ltd. Record whether a visit or a purchase follows a click on a Google advertisement or on a Google listing of the Maison's products, in order to measure the effectiveness of advertising. They use the same Google tag described in paragraph 5.6. If the Marketing category is accepted, Google Ads sets the cookie listed in section 6. If only the Analytics category is accepted, Google Ads sets no cookie but receives signals without cookies that report the visit and the refusal of the Marketing category. For purchases, Google Ads may also receive the contact details provided by the customer at checkout, in pseudonymised (hashed) form ("enhanced conversions").
5.8 Marketing — Meta pixel and Conversions API. Provided by Meta Platforms Ireland Ltd. Record visits, products viewed, items added to the cart, the start of checkout and purchases, as well as clicks on the Site's buttons, in order to measure advertising on Facebook and Instagram and to allow the Maison to address that advertising to relevant audiences. For purchases Meta receives the value of the order, the products and whether the customer is new or returning; for customers who have identified themselves, Shopify also transmits their contact details in pseudonymised (hashed) form. The automatic collection of contact details from the Site's pages ("automatic advanced matching") is disabled. Where consent is given, the same events are also transmitted to Meta by Shopify's servers (the "Conversions API"), which Shopify states are subject to the same consent. Loaded only after consent to both the Analytics and the Marketing categories.
5.9 Analytics and marketing — Klaviyo. Provided by Klaviyo, Inc. Records browsing on the Site — pages, collections and products viewed, searches made, items added to the cart — and associates it with the User's profile where the User has subscribed to the newsletter, is signed in to their customer account or has otherwise identified themselves, for example by opening a link in an email from the Maison, in order to send relevant communications. Loaded only after consent to both the Analytics and the Marketing categories.
5.10 Shop. On the first visit and then periodically, Shopify's Shop service (shop.app) is contacted in order to keep the cart synchronised with the Shop app for those who use it, and sets the _shop_app_essential cookie on the shop.app domain (1 year), which Shopify classifies as necessary for the functioning of Shop; the time of the next check is kept in the browser's local storage (signInWithShop:cartSyncNextRecognitionAt). Signing in with Shop is not offered on the Site.
5.11 Save for the above, the Site loads no other third-party content. In particular, the fonts used by the Site are served from the Maison's own domain and no connection to a font provider takes place, with the exception of the Google map described in paragraph 5.3 which, once enabled, loads its own fonts from Google's servers.
6. Cookies set by the analytics and marketing tools
6.1 With consent, the tools described in paragraphs 5.5 to 5.9 set the following cookies on the User's device. None of them is set before a choice is made or after a refusal.
- _ga and _ga_X80X78CVPX (Google Analytics 4) — distinguish one visitor from another and preserve the state of the visit. Duration: up to 2 years. Category: Analytics.
- _gcl_au (Google Ads) — associates a purchase with the advertisement that led to it. Duration: 90 days. Category: Marketing.
- _ga_KZJW8N43V8 (Google Merchant Center) — preserves the state of the visit for the measurement of Google product listings. It is set when the Analytics category is accepted. Duration: up to 2 years. Category: Analytics.
- _fbp (Meta), and _fbc where the visit follows a click on a Meta advertisement — associate visits and purchases with the advertising that led to them. Duration: 90 days. Category: Marketing.
- __kla_id (Klaviyo) — associates browsing with the User's Klaviyo profile. Duration: up to 2 years. Categories: Analytics and Marketing.
- _shopify_analytics (Shopify) — aggregate statistics on visits and checkout. Duration: 1 year. Category: Analytics.
- _shopify_marketing (Shopify) — marketing data of the platform relating to the store and the checkout. Duration: 1 year. Category: Marketing.
- shopify_client_id (Shopify) — visitor identifier used for measurement; set only with consent to both the Analytics and the Marketing categories. Duration: 1 year. Categories: Analytics and Marketing.
6.2 These tools may also store equivalent identifiers in the browser's local storage. The names and durations above are those set by the providers and may change; where a browser caps the lifetime of cookies, the actual duration may be shorter than the one stated (for example, 400 days instead of 2 years); this list is updated when they do (paragraph 8.1).
6.3 Withdrawing consent prevents these tools from being loaded again. The cookies they have already stored are not deleted by the withdrawal itself, and may be deleted through the browser settings (section 7).
6.4 The data collected by these tools is received by Google Ireland Ltd, Meta Platforms Ireland Ltd and Klaviyo, Inc.; the data of the platform's own measurement (paragraph 5.5) is processed by Shopify International Ltd on behalf of the Maison, and the data of the live chat (paragraph 5.2) by Chatra (Roger Wilco LLC). For transfers of personal data outside the European Economic Area and the safeguards adopted, reference is made to the Privacy Policy.
7. Controlling cookies through the browser
7.1 Independently of the choice expressed on the Site, every browser allows cookies to be inspected, blocked or deleted through its own settings. Blocking strictly necessary cookies will prevent the cart and the checkout from working.
7.2 Deleting the cookies stored by the Site also deletes the record of the consent choice; the banner will therefore be displayed again on the next visit.
8. Changes to this Cookie Policy
8.1 This document is updated whenever a technology is added to or removed from the Site. The version number and date appear at the head of the page, and the previous versions are retained by the Maison.
8.2 Requests concerning this document may be addressed to info@torrinijewels.com.