Effective Date: July 26, 2025

This Cookie Policy explains how ASPRI Creative Acoustics Inc. (“ASPRI”, “we”, “us”, or “our”) uses cookies and similar technologies on our website and online store (the “Website”). It also explains your choices, including consent, opt‑out, and preference controls.

For how we process personal information generally, see our Privacy Policy.

1. What cookies are

Cookies are small text files stored on your device that help a site function and measure performance. Related technologies include local storage, pixels, SDKs, and device identifiers. Non‑essential cookies require your consent in the EU/EEA and similar jurisdictions.

Legal background: EU ePrivacy Directive art. 5(3) (consent for non‑essential cookies) and CJEU Planet49 (no pre‑ticked boxes); CPRA treats cross‑context behavioral advertising as “sharing.” Québec Law 25 requires consent that is clear, free and informed.

2. Who sets cookies

Cookies on the Website are set by:

• First‑party (ASPRI) – to operate the cart, checkout, language, and security features.
• Third‑party – limited to Google Analytics 4 (“GA4”) for site analytics. We do not use advertising cookies and we do not run behaviorally targeted ads on the Website.

3. Cookies we use

We categorize cookies as Strictly Necessary and Analytics. The list below reflects current use; if our stack changes, we will update this page.

3.1 Strictly Necessary (always on)

• Session / cart / checkout — maintains your session, cart contents, and checkout steps; prevents CSRF and fraud; preserves language/locale. Duration: session to up to 1 year depending on the platform requirement.
• Cookie‑consent state — remembers whether you accepted, rejected, or customized cookies so we do not ask you again on every visit. Duration: up to 12 months (jurisdiction‑dependent).

3.2 Analytics (consent‑based in EU/EEA & similar regions)

• Google Analytics 4 — measures page views, referrers, and aggregate usage to improve performance and content. Identifiers: _ga, _ga_<container-id> (random IDs). Default GA4 behavior does not log or store IP addresses; regional controls and data retention limits are enabled. Retention: typically 2–14 months (we set the lowest practical window). Control: disabled until you consent where required; you may withdraw at any time.

Google states GA4 no longer logs or stores IP addresses by default. See Google documentation referenced below.

4. Your choices

• Consent banner. In the EU/EEA/UK and where required, Analytics are off until you choose “Accept”. You may choose “Reject non‑essential” or customize.
• Change or withdraw consent at any time. Use the Cookie Preferences link (also in the footer) to update settings.
• Browser controls. Most browsers allow blocking or deleting cookies. Blocking may affect site operation (cart/checkout).
• Google opt‑out. Install Google’s browser add‑on to opt out of Analytics measurement across sites: Google Analytics Opt‑out Add‑on.
• Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as an opt‑out of “sale”/“sharing” for California residents and disable Analytics that would constitute sharing.

GPC is recognized under California law as a valid opt‑out preference signal.

5. Regional information

5.1 European Union/EEA & UK

• We obtain consent before setting non‑essential cookies and provide clear information about purposes and partners. No pre‑ticked boxes. You may withdraw consent at any time without detriment.
• Where Analytics involve transfers outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) in Google’s data processing terms, plus GA4 features that limit data and mask IP collection.

See ePrivacy art. 5(3), Planet49, EDPB guidance, and Google DPA/SCCs.

5.2 Québec (Law 25) & Canada (PIPEDA)

• We obtain consent that is clear, free and informed for non‑essential cookies, and we keep purposes specific. You may withdraw consent at any time.
• Under PIPEDA, we provide meaningful consent, identify purposes, and limit collection to what is necessary.

See CAI (Law 25) guidance on consent and OPC “Guidelines for obtaining meaningful consent.”

5.3 California (CCPA/CPRA)

• We do not “sell” personal information. We also do not “share” personal information for cross‑context behavioral advertising. If our practices change, we will update this Policy and provide required opt‑out links.
• We honor Global Privacy Control (GPC) signals as an opt‑out directive.

CPRA defines “share” to include cross‑context behavioral advertising; regulators require honoring GPC signals.

6. Children

Our Website is not directed to children under 13, and we do not knowingly place non‑essential cookies targeted at children. Parents or guardians who believe a child has interacted with our non‑essential cookies may contact us to delete related data and disable such cookies.

7. Updates

We may update this Cookie Policy to reflect changes in technology, providers, or law. When we make material changes, we will update the date at the top and, where required, re‑display the consent banner.

8. Contact

ASPRI Creative Acoustics Inc.
2620A Rue de Salaberry, Montreal, Quebec, H3M 1L3, Canada
+1 (514) 333‑0310
info@aspri.com

References: EU ePrivacy Directive art. 5(3) (consent for non‑essential cookies); CJEU Planet49 (no pre‑ticked boxes); EDPB/European Commission guidance on cookies; Google GA4 IP handling; Google Data Processing Terms & SCCs; OPC Canada meaningful consent; CAI Québec consent principles; California CPRA definition of “share”; CPPA FAQ on GPC.