This policy is a detailed operational template generated for the configured Gaotus service. It is not a substitute for legal advice and should be reviewed against the operator’s real company details, payment stack, subprocessors, retention schedule, audience and jurisdictions before publication.
1. Cookies and storage/access technologies
Cookies are one form of storage and access technology. Similar technologies can include local storage, session storage, SDK identifiers, pixels or other mechanisms that store information on, or access information from, a user device.
2. Strictly necessary cookies
Gaotus may use cookies for WordPress/WooCommerce authentication, secure sessions, CSRF protection, session preferences, cart and checkout. These are required to provide the service you request and disabling them may break essential functionality.
3. WooCommerce and payment gateways
WooCommerce and your selected payment gateway may set cookies for cart state, checkout, fraud prevention and payment confirmation. The exact cookies depend on the gateways installed and the merchant configuration.
4. Preferences and functionality
We may store preferences such as language, interface settings or application state to maintain a consistent customer experience.
5. Analytics, marketing and consent
Analytics or advertising technologies are not treated as essential by default. Where non-exempt storage or access technologies are enabled, they should not be set before any legally required consent is obtained. The choice mechanism should make refusal as easy as acceptance, require a positive opt-in where consent is required, identify the relevant third parties and provide a simple route to change or withdraw choices.
6. Your controls
You can control storage and access technologies through your browser and any consent tool made available on this site. Blocking strictly necessary technologies can prevent sign-in, checkout or Council from functioning. Refusing non-essential technologies should not prevent access to the core service unless a particular optional feature genuinely depends on them.
7. Duration
Session technologies normally expire when a session ends; persistent technologies may remain for a defined period. The live consent notice should state the actual durations for enabled non-essential providers and the merchant should periodically review whether each duration remains justified.
8. Third parties
If third-party analytics, advertising, embedded media or similar tools are activated, the consent interface and this policy should identify the organisations responsible for those technologies and link to appropriate information about their purposes where practical. Generic descriptions should not replace a live inventory.
9. Consent records and withdrawal
Where consent is the legal basis, the operator should keep an appropriate record of the choice and make withdrawal as straightforward as giving consent. Withdrawal does not retrospectively make prior lawful processing unlawful.
10. Technology inventory
Before launch and after material configuration changes, the operator should audit the site to identify actual cookies and similar technologies, their provider, purpose, category, duration and whether an exemption or consent rule applies. This generated policy does not automatically discover every third-party technology installed by other plugins or themes.
11. Changes and contact
The technology set can change when integrations are enabled or disabled. Review this page and the live consent configuration periodically, and contact us if you have questions.
Contact details
Beaphoenix WebDesign LtdContact: hello@gaotus.com