1. Controller
- Name: Cresta y Pluma
- Owner: Thais Rodríguez Coso
- Tax ID (NIF): 47940057F
- Address: Calle Real de Villalón, 7, 47609 Fontihoyuelo (Valladolid), Spain
- Contact email: support@crestaypluma.com
This Cookie policy explains what cookies are, which ones we use on crestaypluma.com (the "Site"), what they are for, and how you can accept, reject or withdraw your consent. It applies together with our Privacy policy, in line with Article 22.2 of Spanish Law 34/2002 (LSSICE), the GDPR and the LOPDGDD.
2. What cookies are
Cookies are small files the Site stores in your browser or device when you visit it. They remember your cart, keep you signed in, measure how the store is used or show you ads. We also use similar technologies (local storage, pixels), and everything said here about cookies applies to them too.
3. Types of cookies we use
By who manages them
- First-party: set by the Site (through Shopify, which hosts the store).
- Third-party: set by other services, such as Google.
By purpose
- Strictly necessary: essential for the store to work (cart, session, security, checkout). They do not require consent.
- Preferences: remember settings such as language or country. They count as necessary when they are essential to provide the service you request.
- Statistics / analytics: help us understand how the Site is used so we can improve it. They require your prior consent.
- Marketing / advertising: measure campaign results and allow relevant ads to be shown. They require your prior consent.
4. Specific cookies
Names and durations may change when Shopify or Google update their services. This table lists the usual ones.
Strictly necessary and preferences (no consent needed)
| Cookie | Purpose | Duration |
|---|---|---|
_shopify_essential / _secure_session_id
|
Secure store session | Session |
cart, cart_sig, cart_ts, cart_ver
|
Store cart contents and check they have not been tampered with | 2 weeks |
checkout_token, secure_customer_sig
|
Checkout process and customer account access | Session / up to 20 years* |
localization, cart_currency
|
Remember country, language and currency | 1 year / 2 weeks |
_tracking_consent |
Stores your cookie choice | 1 year |
_cmp_a |
Manages your privacy preferences | 1 day |
keep_alive |
Keeps the session active while you browse | 30 minutes |
\* Maximum duration stated by Shopify for some account cookies. You can delete it from your browser.
Statistics (with consent)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_shopify_y, _shopify_s
|
Shopify | Internal visit and session statistics | 1 year / 30 min |
_orig_referrer, _landing_page
|
Shopify | Record where a visit comes from and the first page viewed | 2 weeks |
_ga |
Google Analytics | Distinguishes visitors anonymously | 2 years |
ga<ID> |
Google Analytics | Keeps session state | 2 years |
Marketing (with consent)
These are set only if you accept marketing cookies and only while campaigns are running.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_gcl_au, _gcl_aw
|
Google Ads | Measure ad conversions | Up to 90 days |
IDE, NID and similar |
Personalised advertising and measurement | Up to 13 months |
5. How to manage your consent
When you enter the Site we show a banner with Accept, Reject and Manage preferences, all equally visible. Until you accept, we do not set any statistics or marketing cookies.
- Change or withdraw your consent: you can do so at any time from the privacy preferences link in the footer, or by deleting your browser cookies, which brings the banner back. Withdrawing consent does not affect earlier processing.
- From your browser: you can block or delete cookies in its settings:
- Google Analytics: you can install the opt-out add-on.
- Google advertising: adssettings.google.com.
If you block necessary cookies, some features, such as the cart or checkout, may stop working.
6. International transfers
Shopify and Google may process data outside the European Economic Area, including the United States and Canada, with the safeguards described in section 5 of the Privacy policy.
7. Your rights and complaints
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to support@crestaypluma.com. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD): www.aepd.es.
8. Changes
We may update this policy when the cookies we use or the regulations change. The date of the last update appears at the top of the document. If the change is significant, we will ask for your consent again.