制定网站Cookie政策

Cookie政策

1. 适用范围与概述

• 本政策适用于我们的网站及其在线商店、促销页面和结账流程所使用的Cookie和类似技术（包括像素标签、SDK、设备指纹和本地存储）。
• 我们使用Cookie以确保站点基本功能、改进性能与用户体验、进行转化跟踪、A/B测试以及投放再营销广告。
• 对于欧盟/欧洲经济区用户，我们依据电子隐私指令与GDPR，在设置非必要Cookie前征得同意，并提供与接受同样便捷的拒绝与撤回机制。对于加州用户，我们依据CCPA/CPRA，就可能构成“出售”或“共享”的跟踪用途提供选择退出并响应全局隐私控制（GPC）。

2. 定义

• Cookie：由网站存储在用户设备上的小型文本文件，用于识别设备与记住偏好。
• 第一方Cookie：由本站域名设置。
• 第三方Cookie：由第三方服务（如分析与广告平台）在本站页面上设置。
• 类似技术：包括像素、标签、SDK、本地与会话存储、指纹技术。
• 非必要Cookie：除提供服务所必需之外的Cookie（例如分析、A/B测试、广告与再营销）。

3. Cookie类别与目的 3.1 严格必要（必需）

• 目的：网站与购物车运行、用户会话管理、结账流程、支付与防欺诈、安全与负载均衡、同意记录。
• 示例用途：记住购物车内容、维持登录会话、在结账中验证交易、防止跨站请求伪造（CSRF）。
• 法律依据（GDPR）：履行合同与合法权益；无需事先同意，但需提供透明说明。

3.2 功能性

• 目的：记住语言、区域、显示偏好、用户选择（如隐私偏好）。
• 法律依据（GDPR）：同意或合法权益（取决于是否严格必要）；在非必要情况下需同意。

3.3 性能与分析

• 目的：站点使用统计、错误诊断、性能监控、转化与渠道归因（包括查看促销页到下单的转化路径）。
• 数据要素：页面浏览与事件、设备与浏览器信息、粗略地理位置、匿名或假名化标识符。
• 法律依据（GDPR）：同意。
• 注意：我们在可能情况下实施IP地址掩码/缩短及聚合报告，减少对个人数据的影响。

3.4 A/B测试与实验

• 目的：随机分配页面或功能版本，衡量哪一版本提升转化或可用性。
• 数据要素：实验分组标识、变体分配、相关互动事件与性能数据。
• 法律依据（GDPR）：同意。
• 原则：实验标识符仅用于版本分配与效果衡量，不用于独立广告画像。

3.5 广告与再营销

• 目的：基于站点互动投放与优化广告，限制频次，衡量广告效果，跨设备与跨站点归因。
• 数据要素：页面/产品浏览、加入购物车与购买事件、设备标识、像素ID、再营销列表成员资格。
• 法律依据（GDPR）：同意。
• CCPA/CPRA：此类跟踪可能构成“出售”或“共享”个人信息，用于跨情境行为广告；加州用户可选择退出。

4. 我们设置的Cookie类型与第三方参与

• 第一方Cookie：会话管理、购物车与结账、同意偏好、功能性设置。
• 第三方Cookie与像素：用于分析、广告与实验。本网站可能使用分析与广告平台、标签管理与实验服务（例如分析平台、广告投放平台、再营销像素、A/B测试工具）。实际第三方及其Cookie清单以我们提供的“Cookie偏好中心/同意工具”中动态列示为准。
• 角色与责任：部分第三方作为受托处理者（处理代表我们进行），部分第三方作为独立控制者（依据其隐私政策独立确定目的与手段）。我们与必要的第三方签订数据保护协议，并在需要时使用标准合同条款进行跨境数据传输。

5. 法律依据与区域合规 5.1 欧盟/EEA（GDPR与电子隐私指令）

• 非必要Cookie（分析、A/B测试、广告与再营销）仅在用户同意后设置。
• 严格必要Cookie基于合同履行或合法权益。
• 同意要求：事先同意；提供颗粒化类别选择；拒绝与撤回同样便捷；记录与证明同意；不使用暗模式。

5.2 加州（CCPA/CPRA）

• 通知收集：我们可能通过Cookie与类似技术收集标识符（如cookie ID、设备标识符）、互联网或网络活动信息（浏览、点击、转化）、地理位置（大致位置）以及商业信息（购买或意向）。
• 目的：提供服务、分析、广告投放与归因、安全与防欺诈。
• 出售/共享：为跨情境行为广告而与第三方广告网络共享的追踪数据可能被视为“出售”或“共享”。加州用户可通过“不要出售或共享我的个人信息”链接选择退出，我们也会响应GPC信号。
• 权利：知情、访问、删除、纠错、限制敏感信息使用（如适用）。

6. 保留期限与到期

• 会话Cookie在会话结束时删除。
• 非必要Cookie的有效期通常在1天至13个月之间，依据目的进行最小化设置。我们定期审查并在必要时缩短保留期限。
• 与Cookie关联的事件级数据仅在实现上述目的所需期间保留，并根据法规与公司政策周期性清理或聚合匿名化。

7. 同意管理与用户选择

• 显示与控制：首次访问时展示同意横幅；提供“接受所有”、“拒绝非必要”、“按类别管理”的选项；在页脚或账户设置中提供“Cookie偏好中心”供随时更改选择。
• 撤回同意：用户可随时在“Cookie偏好中心”撤回非必要Cookie的同意，撤回后相关脚本不再加载，且我们将删除或停用非必要Cookie。
• 浏览器控制：用户可通过浏览器设置阻止或删除Cookie；但阻止严格必要Cookie可能影响购物车与结账等功能。
• 全局隐私控制（GPC）：如果浏览器或扩展传达GPC信号，我们将将其视为加州用户的出售/共享选择退出，并在技术上限制相关第三方跟踪。
• 不跟踪（DNT）：行业尚无统一标准；我们主要依据GPC与本政策提供的选择退出机制执行。

8. 数据安全

• 我们不在Cookie中存储支付卡号码、明文密码或敏感个人信息。
• 与Cookie相关的数据在传输过程中采用加密（TLS），并采取访问控制、日志审计与最小权限原则。
• 我们实施假名化与聚合策略（例如在分析中使用掩码IP与事件聚合）以降低识别风险。

9. 跨境数据传输

• 若将与Cookie相关的个人数据传输至欧盟/EEA以外地区，我们将采用适当保障措施（如欧盟标准合同条款、补充技术与组织措施），并评估接收国法律环境对数据保护的影响。

10. 儿童

• 本网站面向一般用户，不以児童为目标。我们不会故意通过Cookie为已知的13岁以下儿童建立广告画像。如果您认为儿童数据被不当收集，请联系我们以进行删除与阻止。

11. 政策更新

• 我们会根据法规变化与技术更新修改本政策。若变更影响非必要Cookie的使用或用户权利，我们将通过横幅或站内通知提示并在必要时重新征求同意。
• 政策顶部会标注“生效日期”和“最后更新日期”。

12. 联系方式与请求权利

• 如对本Cookie政策或数据处理有疑问、请求访问/删除数据、撤回同意，或提交“不要出售或共享我的个人信息”的请求，请通过以下方式联系我们：
  • 电子邮件：[联系邮箱]
  • 地址：[公司地址]
  • 在线：页脚的“隐私设置/Cookie偏好中心”与“不要出售或共享我的个人信息”链接

13. 示例Cookie用途说明（非详尽；实际清单以偏好中心为准）

• 必需：cart_id（记住购物车）、session_token（维持登录会话）、csrf_token（安全防护）、consent_state（记录隐私偏好）。
• 功能：locale（语言/地区）、ui_prefs（界面设置）。
• 分析与转化：analytics_id（匿名访客标识）、page_view、purchase_event（用于转化归因与促销活动效果衡量）。
• A/B测试：experiment_id、variant（版本分配与实验结果统计）。
• 广告与再营销：ad_click_id、remarketing_list_member（基于浏览与购买事件的再营销受众）。

实施说明（面向技术与合规）

• 在欧盟/EEA默认仅加载严格必要Cookie；其它脚本通过同意管理平台（CMP，支持IAB TCF 2.2或同等标准）进行同意门控。
• 打标签与触发：使用标签管理工具时，基于用户选择的类别触发分析、A/B测试与广告像素；拒绝时不触发相关标签且不写入相应存储。
• 转化测量：在获得同意后记录转化事件（例如购买金额、货币、产品类别），并在可能情况下采取去标识化或差分隐私与延迟、聚合报告措施。
• 审计与记录：保存同意事件日志（时间戳、偏好状态、地区与版本），用于合规证明；定期（至少每12个月）审查第三方列表与Cookie清单。
• 加州选择退出：当用户选择“不出售或共享”，禁止跨情境广告用途的数据共享与相关第三方像素触发；GPC信号自动生效。

请根据贵组织的具体服务商与技术栈，完善偏好中心中的第三方列表、Cookie名称、到期时间与用途描述，以确保透明、准确与可验证。

Cookie Policy

Owner: [Company Name] Applies to: [Corporate Website URL] and Member Center at [Member Center URL] Effective date: [YYYY-MM-DD] Policy version: [v1.0] (see Version History)

1. Purpose and scope

• This Cookie Policy describes how [Company] uses cookies and similar technologies on our corporate website and member center (collectively, “Sites”).
• It explains what these technologies are, why we use them, and how you can manage your choices through our Cookie Preference Center.
• This policy should be read together with our Privacy Notice at [Privacy Notice URL].

2. What are cookies and similar technologies

• Cookies are small text files placed on your device by a website. They can be “session” (deleted when you close your browser) or “persistent” (stored until they expire or you delete them).
• First-party cookies are set by the domain you visit; third-party cookies are set by a different domain.
• Similar technologies include:
  • Web beacons/pixels: tiny images or code snippets that record when a page or email is viewed.
  • Local storage and session storage: browser-based storage for data such as settings or tokens.
  • SDKs (for mobile apps): code libraries with similar functions to cookies.

3. How we use cookies We use cookies for the purposes below. The live list of cookies, vendors, and their durations is available in the Cookie Preference Center and may vary by region and time.

• Strictly necessary cookies (no consent required)

  • Purpose: Provide core site functions such as page navigation, load balancing, session management, security (e.g., CSRF protection), and cookie consent logging.
  • Examples: Authentication/session cookies for member sign‑in; cookies that store your privacy choices; security and fraud prevention cookies.
  • Impact if disabled: The Sites may not function properly; you may be unable to sign in or use member features.

• Preference (functional) cookies (consent where required)

  • Purpose: Remember choices such as language, region, accessibility settings, and UI preferences.
  • Impact if disabled: The Sites will still work but may not remember your preferences between visits.

• Analytics/performance cookies (consent where required)

  • Purpose: Measure and improve site performance and reliability (e.g., page load times, error diagnostics), understand usage patterns, and produce aggregated statistics.
  • Practices: We configure analytics to avoid using data for cross-site behavioral advertising. Where feasible, we implement measures such as IP truncation and data minimization.
  • Impact if disabled: We lose insights that help us improve the Sites; your experience is unaffected.

• Advertising/targeting cookies

  • Status: As of the Effective Date, [Company] does not use advertising/targeting cookies on the Sites. If this changes, we will request consent where required and update this policy and the Preference Center.

4. Legal bases and notices

• EU/EEA, UK, and similar jurisdictions (GDPR/ePrivacy)

  • We obtain your consent before setting non-essential cookies (e.g., preference and analytics) and record your choices to demonstrate compliance.
  • Strictly necessary cookies are set based on our legitimate interests in delivering the Sites and ensuring security.
  • You may withdraw consent at any time via the Cookie Preference Center.

• California and certain US states (e.g., CCPA/CPRA)

  • Cookies may be considered “personal information.” We provide clear notice at collection and offer opt-out rights where applicable.
  • We do not “sell” or “share” your personal information via cookies for cross-context behavioral advertising as of the Effective Date. If that changes, we will honor opt-out rights via “Do Not Sell or Share My Personal Information,” respect user-enabled Global Privacy Control (GPC) signals where applicable, and update this policy.

5. Managing your choices

• Cookie Preference Center: Access “Cookie Preferences” via the site footer or the cookie banner. Use category toggles to provide or withdraw consent. Changes take effect on future visits or page reload.
• Browser controls: Most browsers allow blocking or deleting cookies. Doing so may remove stored preferences and can impact essential functionality (especially for member sign‑in).
• Mobile settings: Use device/OS settings for app tracking and ad preferences (if accessing via in-app browser).
• Global Privacy Control (GPC): Where legally required, we treat a valid GPC signal as a request to opt out of sale/share and targeted advertising; the Preference Center will reflect this for applicable categories.
• Do Not Track (DNT): The Sites do not respond to DNT signals because there is no industry standard, but you can manage cookies using the methods above.

6. Cookies used in the Member Center

• Authentication/session cookies: Maintain sign‑in state and route requests securely. Typically session-based; “remember me” cookies may be persistent for a limited duration to streamline re‑authentication.
• Security cookies: Support protections such as CSRF tokens, bot detection, and rate limiting.
• Implementation practices: We set security attributes (e.g., Secure, HttpOnly, SameSite where appropriate). These cookies are first-party and are not used for advertising.
• Impact if disabled: You may be unable to sign in, stay signed in, or perform member actions.

7. Data collected via cookies Depending on category and your choices, cookies and similar technologies may collect:

• Identifiers: Cookie IDs, pseudonymous user IDs, session IDs, or device/browser identifiers.
• Device and browser data: Browser type/version, OS, screen resolution, language, user agent, time zone.
• Usage data: URLs visited, navigation flow, time on page, referrer, error codes, performance metrics (e.g., load times), and feature interactions.
• Network data: IP address and general location derived from IP (e.g., city/region), subject to minimization measures where feasible.
• We do not use cookies to infer sensitive categories. For details on processing, see our Privacy Notice.

8. Retention

• Cookie lifetimes:
  • Session cookies: deleted when the browser session ends.
  • Strictly necessary persistent cookies: retained only as long as required to deliver functionality (e.g., sign‑in state, security), then expire automatically.
  • Preference cookies: retained for up to [12] months unless you delete them sooner.
  • Analytics cookies: retained for up to [13] months unless you delete them sooner.
• Analytics records and reports: We retain analytics data in accordance with our data retention schedule and delete or aggregate data when no longer needed.
• Consent records: We store proof of consent or refusal for as long as necessary to demonstrate compliance and in line with applicable law.

9. Third parties and international transfers

• Vendors: We may engage analytics or consent management providers as processors. The Preference Center lists active vendors, their purposes, and links to their notices.
• Data transfers: If personal data is transferred outside your jurisdiction (e.g., from the EEA/UK to other countries), we rely on appropriate safeguards such as Standard Contractual Clauses (and UK IDTA/Addendum where applicable) and implement supplementary measures as needed.

10. Children

• The Sites are not directed to children where parental consent is legally required for non-essential cookies. We do not knowingly place non-essential cookies for users below the age threshold requiring consent in their jurisdiction.

11. Changes and versioning

• We maintain a version history of this Cookie Policy and record the policy version associated with your consent.
• Material changes (e.g., introducing advertising cookies) will be communicated via the Sites and the Preference Center and, where required, we will request renewed consent.

12. Contact and data protection

• Questions or requests about this Cookie Policy: [privacy@company.com]
• Data Protection Officer (if applicable): [DPO contact or email]
• EU/UK representative (if applicable): [Representative contact]
• For regional privacy rights (e.g., GDPR, CCPA/CPRA), see our Privacy Notice at [Privacy Notice URL] and the “Do Not Sell or Share My Personal Information” page at [URL], where applicable.

Version history

• [v1.0] – [YYYY-MM-DD]: Initial publication.

Notes for implementation (non-contractual)

• Ensure the Preference Center provides granular toggles per category, per vendor where feasible, region-aware consent (opt-in where required), consent logging (timestamp, policy version, jurisdiction), and simple withdrawal.
• Keep the live cookie and vendor list synchronized with actual deployments; avoid setting non-essential cookies prior to consent in opt-in jurisdictions.
• Honor GPC where applicable and map signals to the correct categories.