Cookie Policy

Website: https://www.thatwanderingartist.com/

Effective Date: August 3, 2026

Last Updated: August 3, 2026

1. Introduction & Overview

This Cookie Policy explains how That Wandering Artist uses cookies, tracking pixels, local storage, and similar technologies when you visit our website at https://www.thatwanderingartist.com/. It describes what these technologies are, why we use them, and your legal rights to control our use of them.

As an international online store offering original artwork and related products to customers across the United States, the European Union (EU), European Economic Area (EEA), and United Kingdom (UK), this policy has been crafted to adhere strictly to global data protection laws, including:

  • The EU General Data Protection Regulation (EU GDPR) and UK GDPR;

  • The ePrivacy Directive (Directive 2002/58/EC as amended);

  • The California Consumer Privacy Act (CCPA) as amended by the CPRA; and applicable US state privacy laws.

2. What Are Cookies and Tracking Technologies?

  • Cookies: Small text files placed on your computer, mobile phone, or internet-connected device when you visit a website. Cookies allow the site to recognize your device, maintain session data, remember preferences, and personalize content.

  • First-Party vs. Third-Party Cookies: First-party cookies are deployed directly by thatwanderingartist.com. Third-party cookies are deployed by external service partners (e.g., analytics providers, payment processors, and advertising platforms).

  • Session vs. Persistent Cookies: Session cookies are temporary and expire automatically as soon as you close your web browser. Persistent cookies remain stored on your device for a specified duration or until manually removed.

  • Pixels and Web Beacons: Tiny transparent graphic elements embedded in web pages or emails used to monitor user engagement and ad performance.

3. Legal Basis for Processing Personal Data (EU & UK Visitors)

Under the EU GDPR and UK GDPR, we process personal data collected through cookies under two distinct legal bases:

  1. Explicit Consent (Art. 6(1)(a) GDPR): Required prior to storing or reading any non-essential cookies (Functional, Analytical, and Marketing cookies) on your device.

  2. Legitimate Interest / Contractual Necessity (Art. 6(1)(f) & Art. 6(1)(b) GDPR): Applies strictly to Strictly Necessary cookies required to run our online storefront, secure payment processing, maintain shopping cart integrity, and prevent fraud.

4. Comprehensive Inventory of Cookies Used

Below is a detailed breakdown of all cookies deployed on our Site, categorized by their specific purpose.

A. Strictly Necessary Cookies (Essential)

These cookies are required for the essential operation of our website and e-commerce storefront. They enable page navigation, account logins, shopping cart persistence, and secure payment processing. They cannot be deactivated in our system.

  • _session_id

    • Purpose: Maintains user session state and shopping cart content across pages.

    • Provider: First-Party (Storefront)

    • Duration: Session

    • Legal Basis: Contractual Necessity

  • cart_sig

    • Purpose: Verifies cart integrity and security during the checkout process.

    • Provider: First-Party Platform

    • Duration: 2 Weeks

    • Legal Basis: Contractual Necessity

  • secure_customer_sig

    • Purpose: Authenticates customer account login status and keeps customer sessions secure.

    • Provider: First-Party Platform

    • Duration: 1 Year

    • Legal Basis: Legitimate Interest

  • cookie_consent_state

    • Purpose: Stores visitor explicit cookie banner preferences and opt-in choices.

    • Provider: First-Party Consent Engine

    • Duration: 1 Year

    • Legal Basis: Legal Obligation

  • __cf_bm / cf_clearance

    • Purpose: Cloudflare bot detection, DDoS mitigation, and security verification.

    • Provider: Cloudflare (Third-Party)

    • Duration: 30 Minutes

    • Legal Basis: Legitimate Interest

B. Functional & Preference Cookies

These cookies enable enhanced site functionality, personalizing your browsing experience by remembering choice selections (such as selected currency or language settings).

  • localization_currency

    • Purpose: Remembers the visitor's selected storefront display currency (e.g., USD, EUR, GBP).

    • Provider: First-Party

    • Duration: 1 Year

    • Legal Basis: Explicit Consent

  • store_language

    • Purpose: Retains the visitor's preferred display language for seamless navigation.

    • Provider: First-Party

    • Duration: 1 Year

    • Legal Basis: Explicit Consent

  • wishlist_items

    • Purpose: Stores saved artwork items in the visitor's personal wishlist across visits.

    • Provider: First-Party / App

    • Duration: 6 Months

    • Legal Basis: Explicit Consent

C. Analytical & Performance Cookies

These cookies gather aggregated, statistical information regarding how visitors interact with our Site (e.g., page visit counts, average session duration, navigation paths, bounce rates) to help us optimize user experience.

  • _ga

    • Purpose: Used by Google Analytics 4 to distinguish unique visitors and track overall usage stats.

    • Provider: Google LLC

    • Duration: 2 Years

    • Legal Basis: Explicit Consent

  • _ga_<container-id>

    • Purpose: Maintains persistent session state for Google Analytics 4 telemetry.

    • Provider: Google LLC

    • Duration: 2 Years

    • Legal Basis: Explicit Consent

  • _gid

    • Purpose: Distinguishes user interactions over a 24-hour cycle for analytics reporting.

    • Provider: Google LLC

    • Duration: 24 Hours

    • Legal Basis: Explicit Consent

  • _gat

    • Purpose: Used by Google Analytics to throttle request rates and optimize server calls.

    • Provider: Google LLC

    • Duration: 1 Minute

    • Legal Basis: Explicit Consent

D. Marketing, Advertising & Targeting Cookies

These cookies track your browsing habits across our Site and third-party platforms to build a profile of your interests, delivering relevant advertisements for our artwork on platforms like Instagram, Facebook, Google, and Pinterest.

  • _fbp

    • Purpose: Meta Pixel: Measures advertising conversion rates and powers retargeting campaigns on Meta platforms.

    • Provider: Meta Platforms, Inc.

    • Duration: 3 Months

    • Legal Basis: Explicit Consent

  • _gcl_au

    • Purpose: Google Ads: Evaluates advertising engagement and tracks conversion metrics.

    • Provider: Google LLC

    • Duration: 90 Days

    • Legal Basis: Explicit Consent

  • klaviyo_id

    • Purpose: Tracks email campaign interaction and triggers automated abandoned cart reminders.

    • Provider: Klaviyo, Inc.

    • Duration: 2 Years

    • Legal Basis: Explicit Consent

  • _pin_unauth

    • Purpose: Pinterest Tag: Measures campaign conversions and ad attribution from Pinterest visual ad pins.

    • Provider: Pinterest, Inc.

    • Duration: 1 Year

    • Legal Basis: Explicit Consent

5. Third-Party Service Providers & Data Recipients

We work with vetted third-party companies that deploy cookies on our Site to perform operational, analytical, and marketing services. Below is a list of key external service providers along with direct links to their official privacy documentation:

6. International Data Transfers

Because we operate internationally and leverage global cloud infrastructure (such as servers based in the United States), information collected via cookies may be transferred outside the European Economic Area (EEA) and the United Kingdom (UK).

To ensure your personal data remains protected during international transfers, we rely on statutory transfer mechanisms:

  • EU-U.S. Data Privacy Framework (DPF) & UK Extension: For certified US service providers (e.g., Google, Meta).

  • Standard Contractual Clauses (SCCs): European Commission-approved clauses incorporated into agreements with vendors operating outside recognized adequate jurisdictions.

7. How to Manage, Modify, or Withdraw Consent

You have full autonomy over your cookie preferences (except for strictly necessary cookies). You can adjust or withdraw your consent at any time:

  1. On-Site Cookie Banner / Preference Center: Click the floating "Cookie Preferences" link in our website footer at any time to open our consent preference modal and toggle individual cookie categories on or off.

  2. Browser Settings & Controls: Most web browsers permit you to manage or block cookies through their options settings:

    • Google Chrome: Settings > Privacy and security > Third-party cookies

    • Apple Safari: Preferences > Privacy > Block all cookies

    • Mozilla Firefox: Settings > Privacy & Security > Enhanced Tracking Protection

    • Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies

  3. Industry Wide Ad Opt-Out Portals: You can opt out of interest-based advertising across participating networks:

8. Visitor Rights (GDPR, UK GDPR & US Privacy Laws)

A. Rights for EU and UK Residents

Under the EU GDPR and UK GDPR, you hold specific statutory rights regarding personal data collected via cookies:

  • Right of Access: Obtain confirmation and copies of personal data stored about you.

  • Right to Rectification & Erasure: Request correction or complete deletion ("Right to be Forgotten") of your personal data.

  • Right to Restrict or Object: Object to processing based on legitimate interest or targeted marketing profiling.

  • Right to Withdraw Consent: Revoke consent at any time without impacting lawful processing conducted prior to revocation.

  • Right to Lodge a Complaint: File a complaint with your national Data Protection Authority (e.g., CNIL in France, ICO in the UK, DPC in Ireland, etc.).

B. Rights for United States Residents (CCPA/CPRA & US State Laws)

If you reside in California or other US states with applicable consumer privacy legislation, you possess additional rights:

  • Right to Know / Access: Request disclosure of personal information categories and specific pieces collected.

  • Right to Opt-Out of Sale / Sharing: We do not sell personal data for monetary payment. However, sharing data via third-party advertising cookies may constitute "sharing" or "selling" under California law. You may exercise your right to opt out via our "Do Not Sell or Share My Personal Information" footer link.

  • Right to Non-Discrimination: We will never discriminate against you for exercising your privacy rights.

9. Site Owner Identity & Contact Information

The data controller responsible for the operation of this Site and processing under this Cookie Policy is the owner of That Wandering Artist.

  • Data Controller: That Wandering Artist

  • Website URL: https://www.thatwanderingartist.com/

  • Legal Representative / Owner: [Insert Owner Full Name / Legal Business Name]

  • Email for Privacy Queries: [privacy@thatwanderingartist.com] (or [Insert Owner Contact Email])

  • Postal Address: [Insert Business Address, City, Zip Code, Country]

  • Legal Notice / Impressum: For comprehensive legal entity disclosures, please see our Legal Information / Legal Notice Page.

10. Updates to This Policy

We may update this Cookie Policy periodically to reflect changes in cookie technologies, legal requirements, or operational updates. Any updates will be published on this page with a revised "Last Updated" date at the top.