Cookie Policy

Last updated: 8 August 2025

This Cookie Policy explains how CHOPSTICK, Azijska kuhinja Gretchen Alaras s.p. ("Chopstick", "we", "us") uses cookies and similar technologies on the website https://chopstick.si (the "Website").

Controller: CHOPSTICK, Azijska kuhinja Gretchen Alaras s.p., Košenice 90, 8000 Novo mesto, Slovenia
Email: info@chopstick.si
Phone: +386 (0)68 154 289

1. What are cookies and similar technologies

"Cookies" are small text files stored on your device when you visit a website. We may also use pixels/tags, local storage (localStorage/sessionStorage) and advertising IDs (together, "cookies and similar technologies").

2. Principle and legal basis

  • Strictly necessary cookies are used without consent because they are required for the Website to function (e.g., basket, sign‑in, security).

  • We request your prior consent for all non‑essential cookies (e.g., analytics and advertising/personalisation) in line with ZEKom‑2 (Slovenian e‑privacy law). Any related processing of personal data is based on your consent under the GDPR. You can withdraw your consent at any time (see "Managing settings" below).

3. How we use cookies (categories)

  • Strictly necessary – enable core functions (e.g., storing your basket, processing payments, security). Disabling is not possible because the Website would not work properly.

  • Analytics – help us understand how the Website is used (number of visits, clicks, popular pages) and improve the experience. Used only with your consent.

  • Advertising/Personalisation – enable the display of relevant ads and measurement of ad effectiveness; may include cross‑site tracking. Used only with your consent.

  • Functional (where applicable) – remember your choices (e.g., language) to tailor how the Website operates.

4. Providers we use (third parties)

The Website may integrate the following service providers (the actual set is shown in the cookie banner and may change from time to time):

  • Shopify (store hosting; strictly necessary and functional cookies – e.g., basket, session tokens).

  • [OPTION] Google Analytics 4 (GA4) – traffic analytics (analytics cookies).

  • [OPTION] Meta Pixel (Facebook/Instagram) – ad measurement and remarketing (advertising cookies).

  • [OPTION] Klaviyo – email campaign analytics and/or on‑site tags (analytics/advertising cookies).

  • [OPTION] Shopify Audiences – personalised advertising within the Shopify ecosystem (advertising cookies).

Note: These services may involve data transfers outside the EEA; where this occurs, we use appropriate safeguards (e.g., Standard Contractual Clauses – SCCs). See our Privacy Policy and each provider’s privacy notice for details.

5. List of cookies

Below is an example of the main cookies that may be used. The actual list (name, provider, purpose, duration) is always shown in the “Cookie settings” banner and may change as services are updated.

Cookie name (example) Provider Category Purpose Duration
cart, cart_sig, cart_ts, checkout_token Shopify Strictly necessary Basket, checkout, transaction security session / short
secure_customer_sig Shopify Strictly necessary Account sign‑in/security up to 1 year
_shopify_y, _shopify_s Shopify Analytics Store performance statistics and analytics up to 1 year
_ga, _ga_* Google Analytics 4 Analytics Measuring Website usage up to 2 years
_fbp Meta Advertising Measuring and optimising ads up to 3 months

Cookie duration and set may vary depending on configuration; always refer to the “Cookie settings” banner for details.

6. Managing settings and withdrawing consent

  • On your first visit you will see a cookie banner where you can choose “Accept all”, “Reject non‑essential” or “Settings” by category.

  • You can change your choices at any time via the “Cookie settings” link in the Website footer (or the floating icon, if available).

  • You can also configure your browser to delete or block cookies; this may affect Website functionality.

7. Processing of personal data

Cookies may involve processing personal data (e.g., IP address, device identifiers, cookie IDs, on‑site activity data). Details about the controller, legal bases, your rights (access, deletion, objection, portability, withdrawal of consent) and contacts are set out in our Privacy Policy.

8. International transfers

If providers process data outside the EEA (e.g., in the USA or Canada), we implement appropriate safeguards (SCCs and additional measures). Provider privacy notices:

9. Changes to this Cookie Policy

We may update this Policy from time to time (e.g., if we change providers or add new categories). The latest published version with the update date will always apply.

10. Contact

For questions about cookies and privacy, email info@chopstick.si.