Cookie Policy

Last updated: 14 Aug 2025

This Cookie Policy explains how NEXABOOKS (“we”, “us”, “our”) uses cookies and similar technologies on https://nexa-books.com (the “Site”). It should be read together with our Privacy Policy and Terms of Service.

If you have questions, contact: support@nexa-books.com or [Legal entity name & postal address].

---

1) What are cookies?

Cookies are small text files placed on your device when you visit a website. They do things like keep you signed in, remember what’s in your cart, and measure how the site is used. Cookies can be:

• Session cookies — deleted when you close the browser.

• Persistent cookies — stay until they expire or you delete them.

• First-party — set by this Site.

• Third-party — set by services we use (e.g., payments, analytics, ads).

We also use similar technologies:

• Local storage / session storage (browser-based key–value storage)

• Pixels / tags / SDKs (tiny images or code that send limited info to a provider)

• Device fingerprinting (rare; used only for security/fraud prevention if enabled)

---

2) Why we use cookies (purposes)

We categorize our cookies as follows:

1. Strictly Necessary (Essential)
   Required for core functionality: browsing, cart, checkout, account log-in, fraud prevention, security, consent logging. These cannot be switched off.

2. Performance & Analytics
   Help us understand traffic and improve the Site (e.g., which pages people read). We use aggregated, non-sensitive metrics whenever possible.

3. Functionality
   Remember choices and preferences (e.g., language/market, cookie consent state).

4. Advertising & Retargeting (only if enabled)
   Measure campaigns and show more relevant ads on other platforms. This category is optional and subject to your consent.

---

3) Legal bases & regional notes

• EU/EEA/UK (GDPR & ePrivacy):

  • Essential cookies: Legitimate interests (to run the Site).

  • All other cookies: Consent (via our cookie banner/preferences).

• US (CPRA/CCPA and similar):

  • You may have the right to opt-out of “selling” or “sharing” personal information for cross-context behavioral advertising. Use our “Do Not Sell or Share My Personal Information” link (where provided) or the preferences in the banner.

• Other regions (e.g., Brazil LGPD, Canada PIPEDA):

  • We apply consent or opt-out as required by local law.

You can withdraw or change consent at any time (see Section 6).

---

4) Cookies we may set

Notes:

• Names and lifespans can vary by theme, apps, and updates from providers (Shopify and others).

• Not all cookies below will be active; it depends on which features you enable (payments, analytics, ads, email tools).

• We keep this table updated as our stack changes.

A) Strictly Necessary (cannot be disabled)

B) Performance & Analytics (consent-based)

C) Functionality (consent-based)

D) Advertising & Retargeting (consent-based)

If we integrate email tools (e.g., Klaviyo/Omnisend), their cookies or pixels may record subscription events and campaign performance after you consent.

---

5) Third parties we may work with

• Shopify (hosting, checkout, fraud prevention, analytics)

• Payment providers (e.g., Shopify Payments, PayPal, Stripe)

• Analytics (e.g., Google Analytics 4)

• Advertising (e.g., Meta, Google Ads, TikTok, Microsoft Ads)

• Email & CRM (e.g., Klaviyo/Omnisend)

Each provider may set its own cookies when their features are active. For details, see the provider’s privacy/cookie documentation.

---

6) Managing your cookie choices

• Consent banner / Preferences:
  On your first visit, we show a banner. Click “Accept all”, “Reject non-essential”, or “Manage preferences” to choose categories. You can reopen the preferences at any time by clicking [Cookie Preferences] in the footer or [link to your banner’s “Manage cookies” page].

• Browser controls:
  You can block or delete cookies in your browser settings. Instructions:

  • Chrome: chrome://settings/cookies

  • Safari: Preferences → Privacy

  • Firefox: Preferences → Privacy & Security

  • Edge: Settings → Cookies and site permissions
    Blocking essential cookies may break login and checkout.

• Advertising opt-outs (US/EU):

  • NAI/DAA opt-out pages for interest-based ads, and platform settings (Meta/Google/TikTok).

  • If you are in a CPRA/CCPA state, you may also use “Do Not Sell or Share My Personal Information” (if available on our Site).

• Analytics controls:
  For GA4, you can use Google’s consent mode (when we enable it) and/or browser add-ons that limit analytics cookies.

---

7) Data we derive from cookies

Cookies may capture or infer online identifiers (e.g., cookie ID, IP address truncated or anonymized where possible), device info (browser type, OS), interaction data (pages visited, clicks), and transaction context (cart state, order ID). We do not store full payment card numbers on our servers.

We retain cookie-derived data as long as necessary for the purposes above, respecting provider defaults and legal retention requirements (e.g., tax records).

---

8) International transfers

If cookie or pixel data is processed outside your country (for example, in the US), we use safeguards required by law (e.g., Standard Contractual Clauses, approved transfer mechanisms). Providers may rely on additional measures such as encryption and access controls.

---

9) Children’s data

Our Site is not directed to children. We do not knowingly place non-essential cookies on devices of users under the age required by local law for consent. If you believe a child has used the Site, contact support@nexa-books.com.

---

10) Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. Because there’s no common standard, our Site does not respond to DNT signals. We honor applicable regional opt-out rights via our banner and links described above.

---

11) Changes to this policy

We may update this Cookie Policy to reflect changes in technology, law, or our services. When we do, we’ll revise the “Last updated” date and, where required, prompt you to review your preferences again.

---

12) Contact us

• Email: support@nexa-books.com

• Postal: [Legal entity name], [Street, City, Postal Code, Country]

• Subject line: “Cookie Policy”

---

13) Detailed cookie list (template you can maintain)

Keep this table current as you add/remove apps. You can paste it into the page and update quarterly.