Cookie Policy
This Cookie Policy explains how CarvFlow uses cookies and similar technologies on carvflow.com, the purposes for which they are used and how you can manage your choices.
For information about personal-data processing more generally, please see the Privacy Policy.
1. What are cookies?
Cookies are small text files or similar identifiers stored on or accessed from a device when a website is used. They may be used to maintain a session, remember settings, secure an account, operate a cart or checkout, measure website usage, prevent fraud or support advertising.
References to cookies in this Policy also include comparable browser or device technologies where the same legal rules apply.
2. Consent
Strictly necessary cookies may be used without prior consent where they are genuinely required to provide a service explicitly requested by the user, such as account login, security, cart, checkout, subscription management or payment processing.
Analytics, advertising and other non-essential technologies are not activated until the user has provided the consent required by applicable law.
You may reject optional cookies without losing access to core website functionality that does not depend on those cookies. You can also withdraw or change consent later through the site's Cookie Settings control.
3. Cookie categories
| Category | Purpose | Consent rule |
|---|---|---|
| Strictly necessary | Authentication, security, cart, checkout, account/session management, subscription functions, fraud prevention and payment functionality requested by the user. | Used without consent only where the legal exemption for strictly necessary technologies applies. |
| Preferences | Remember optional settings and choices that are not strictly necessary to provide the requested service. | Used only with consent where required. |
| Analytics | Measure website usage, traffic, performance and interactions. | Activated only after the required consent. |
| Advertising / Marketing | Campaign measurement, conversion tracking, remarketing, personalised advertising or cross-site identifiers. | Activated only after the required consent. |
4. WordPress and WooCommerce
CarvFlow uses WordPress and WooCommerce to provide the online store and customer account. These systems can use session, authentication and cart-related technologies required to remember cart contents, maintain a login, protect account access, complete checkout and manage subscriptions.
The exact technical cookie names can change when WordPress, WooCommerce or related extensions are updated.
5. WooCommerce Subscriptions
WooCommerce Subscriptions supports recurring-subscription and customer-account functions. Technologies that are genuinely necessary to provide those requested functions are treated as strictly necessary. Any optional tracking added by another provider remains subject to its own consent category.
6. Payments: Stripe and ifthenpay
When a payment method is selected, Stripe and/or ifthenpay may use cookies or similar technologies for payment execution, security, authentication, fraud detection and regulatory compliance.
Technologies that are genuinely necessary to complete the payment service selected by the user may be treated as strictly necessary. Any separate analytics or advertising technologies of a payment provider must be classified according to their actual purpose.
7. Google Analytics
CarvFlow uses or may enable Google Analytics to understand website usage and performance. Google Analytics is treated as an optional analytics technology and must remain disabled until the required consent has been obtained.
Depending on configuration, analytics data may include device/browser information, pages and events, approximate location derived from network information, referral/campaign information and online identifiers.
8. Google Ads
CarvFlow may use Google Ads for conversion measurement, campaign attribution, remarketing or advertising. Advertising cookies or identifiers associated with Google Ads are optional and are activated only after the required marketing consent.
9. Meta Pixel
CarvFlow may use the Meta Pixel to measure advertising campaigns, conversions and website interactions associated with Meta services. Meta Pixel is an optional marketing technology and is activated only after the required consent.
10. CAPTCHA and anti-abuse technologies
CarvFlow may use CAPTCHA or similar anti-abuse technologies to protect contact forms, account access, registrations and checkout from bots, spam or automated abuse.
Where a CAPTCHA technology is strictly necessary for the security of a requested function, it is used only to the extent necessary for that purpose. If the selected CAPTCHA provider uses additional non-essential tracking, that tracking must remain blocked until the relevant consent is obtained.
11. Newsletter and support/chat tools
Newsletter and customer-support/chat tools may use cookies or similar technologies where necessary to provide their features. Optional tracking by those tools is classified according to its real purpose and, where required, is activated only after consent.
12. Current technical inventory
The consent interface is the current technical cookie inventory. Because cookie names, durations and third-party technologies can change when WordPress, WooCommerce, payment extensions, analytics or advertising providers are updated, CarvFlow's Cookie Settings interface should display the current cookie/provider/purpose/duration details detected or configured for the production website.
| Technology / provider | Main purpose | Category | When activated |
|---|---|---|---|
| WordPress / WooCommerce | Login, account, cart, checkout, session and security. | Strictly necessary where required for the requested function. | As required to provide the requested service. |
| WooCommerce Subscriptions | Subscription/account functionality. | Strictly necessary where required. | As required to provide subscription functions. |
| Stripe / ifthenpay | Payment, authentication, fraud/security and payment-service operation. | Strictly necessary to the extent required for the selected payment; otherwise based on actual purpose. | When the relevant payment flow is used. |
| Google Analytics | Website measurement and analytics. | Analytics | Only after analytics consent. |
| Google Ads | Conversion measurement, advertising and remarketing where enabled. | Advertising / Marketing | Only after marketing consent. |
| Meta Pixel | Campaign measurement, advertising and remarketing where enabled. | Advertising / Marketing | Only after marketing consent. |
| CAPTCHA / anti-abuse provider | Bot, spam and abuse prevention. | Necessary security or another category depending on the provider's actual behaviour. | According to necessity and consent requirements. |
| Newsletter / support or chat provider | Requested communications, support and optional engagement tracking. | Necessary, preferences or marketing depending on actual purpose. | According to the requested feature and consent requirements. |
13. Managing your choices
When consent is required, the site presents a cookie-consent interface before non-essential cookies are activated. The user can accept or reject optional categories and can later reopen Cookie Settings to change or withdraw consent.
Browsers also provide controls to delete or block cookies. Blocking strictly necessary cookies may prevent login, cart, checkout, payment or account functions from working correctly.
14. Third-party technologies
Some third-party services may set or access technologies when their features are used. Where those third parties act independently, their own privacy and cookie terms apply to their processing.
CarvFlow aims to prevent non-essential third-party analytics and marketing technologies from loading before valid consent has been obtained.
15. Retention
Cookie duration depends on the specific technology. Session cookies normally expire when the browser session ends, while persistent cookies remain for a defined period unless deleted earlier.
The current retention period for each non-essential cookie should be shown in the Cookie Settings interface or the current technical inventory generated by the site's consent-management system.
16. Changes to this Cookie Policy
CarvFlow may update this Policy when the website, providers, consent settings or legal requirements change. The current version and last-updated date will be published on this page.
17. Contact
For questions about cookies or privacy, contact info@carvflow.com.
Legal information
CarvFlow is a commercial brand operated by Diogo Manuel Costa Barros de Carvalho,
Empresário em Nome Individual (Portugal).
NIF: 268143650
Avenida da República 336, 4430-188 Vila Nova de Gaia, Portugal
info@carvflow.com ·
+351 912 215 685