This policy explains how the Parloy store uses cookies and similar technologies and how you can manage your consent.
Last updated: 21 July 2026.
1. Website controller
The website and data controller is Sara Cosmetics Sp. z o.o., ul. Patriotów 132A, 04-839 Warsaw, Poland, KRS 0001158135, NIP 9522266931, REGON 540998084. Privacy contact: sklep@parloy.com, tel. +48 789 321 401.
2. What cookies are
Cookies are small pieces of information stored in a browser or device while a website is being used. Similar technologies include browser local storage and measurement signals sent by analytics tools.
3. Categories used by the store
- Necessary — enable WordPress and WooCommerce, the cart, checkout, payments, security, customer sessions, and storage of consent choices. They cannot be disabled in the banner.
- Preferences — remember selected settings, such as the website language.
- Analytics — help measure visits, store usage and content performance. They are activated after consent.
- Marketing — are used to measure campaigns and, after advertising accounts are connected, for attribution and remarketing. They are activated after consent.
4. Tools and providers
- WooCommerce — cart, order, session and visit-source attribution handling.
- Complianz and WP Consent API — storage and communication of category consent choices.
- Google Analytics 4 and Google Tag Manager through Site Kit — measurement of visits and events after analytics consent and preparation of advertising measurement after marketing consent.
- Matomo — cookieless measurement of visits and e-commerce events, activated only after analytics consent; server: matomo.notangrysoftware.com.
- Google Ads and Google for WooCommerce — once the accounts are connected, they will be used for conversion measurement and product presentation only in accordance with consent settings.
The fonts used by the website are stored locally on the Parloy server and do not require a connection to Google Fonts.
5. Google Consent Mode v2
Before the visitor makes a choice, analytics_storage, ad_storage, ad_user_data and ad_personalization are set to denied. In this state, Google may receive a technical cookieless measurement signal without an Analytics or advertising identifier being stored in the browser. After consent, the relevant settings change to granted; after rejection they remain denied.
6. How to manage consent
On the first visit, you can choose “Accept all”, “Reject optional” or “Cookie settings”. You can later change or withdraw consent through the “Cookie settings” button available on the website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
7. Storage period
The consent decision is stored for no longer than 365 days. Session cookies are usually deleted when the browser is closed, while other cookie lifetimes depend on their purpose and the provider’s configuration. Cookies can also be deleted in browser settings.
8. Recipients and data transfers
Technical data may be processed by providers of hosting, store infrastructure, payments, Matomo and Google services to the extent arising from the selected consents. Information about data-processing rules and user rights is available in the Privacy Policy. If a provider processes data outside the European Economic Area, mechanisms required by applicable law are used.
9. Policy changes
This policy may be updated following changes to tools, store configuration or the law. The current version is always available at this address.