COOKIE POLICY

 

1) What this policy covers

This Cookie Policy explains what cookies and similar technologies are, how and why we use them, what categories we use, who sets them, how long they last, and how you can control your choices at any time. For how we handle personal information more broadly (including your rights), see our Privacy Policy.

 

2) What are cookies & “similar technologies”?

• Cookies are small text files placed on your device to make websites work—or work better.
• Similar technologies include local storage, SDKs, web beacons/pixels, and device identifiers that can operate like cookies.
• These can be first-party (set by us) or third-party (set by our service providers).
• Cookies can be cleared or blocked in your browser settings. Cookies don’t let us run code on your device, and you can control them.

 

3) Scope, consent & Consent Mode

We use a consent banner (Cookie Compliance™) to obtain and store your choices by category. Non-essential categories run only after consent. We support Google Consent Mode and honour Global Privacy Control (GPC) where applicable. You can adjust settings any time via Manage cookie preferences (cookie icon on the lowe-right corner of the page). We maintain auditable consent logs via our CMP (timestamp, categories selected, region) and re-prompt at reasonable intervals or when vendors/purposes materially change.

 

4) Who is responsible (controller)

Michelle Harpas is the controller for cookie decisions on this site. Some third-party vendors (e.g., analytics/ads platforms) act as processors on our behalf.

 

5) How we use cookies

We use cookies to:

• Run the site (security, forms, checkout, load balancing).
• Remember choices (language/timezone, accessibility).
• Understand performance (page views, navigation patterns) to improve content.
• Support advertising (if you consent) so off-site ads are more relevant and frequency-capped.

We do not sell your personal information. See our Do Not Sell/Share note in Section 11 (for CPRA).

 

6) Cookie categories (what runs and why)

You’ll see these categories in our banner/preference centre:

• Strictly Necessary (Always Active)

• • Purpose: Core site functions—page navigation, security (e.g., CSRF), session state, load balancing, consent storage, and minimal checkout functions (e.g., ThriveCart).
  • Legal basis (EU/UK): Legitimate interests / strictly necessary.
  • Typical lifespan: Session to 12 months (consent storage).

• Functional (Optional)

• • Purpose: Remember choices like language, timezone, accessibility; enable embedded schedulers/players (e.g., Paperbell scheduler, Zoom web launcher).
  • Legal basis (EU/UK): Consent.
  • Typical lifespan: Session to 12 months.

• Analytics (Optional)

• • Purpose: Measure what’s working and improve the site (aggregated reports: page views, navigation, attribution).
  • Legal basis (EU/UK): Consent.
  • Typical lifespan: 6–13 months depending on provider.
  • Consent Mode: Without consent, tags operate in a restricted/denied state (no non-essential cookies).

• Advertising / Retargeting (Optional)

• • Purpose: Show more relevant promotions off-site and cap ad frequency (e.g., Google Ads, Meta Pixel).
  • Legal basis (EU/UK): Consent.
  • Typical lifespan: 3–13 months depending on provider.

7) Typical lifespans (quick reference)

• Necessary: session / up to 12 months (e.g., consent storage).
• Functional: session / up to 12 months.
• Analytics: 6–13 months (varies by vendor).
• Advertising: 3–13 months (varies by vendor).

Example vendor ranges as of 13 November 2025 (subject to change by provider):

• LinkedIn 6–13 months
• Pinterest 3–13 months
• Meta 3–13 months
• Google Ads 3–13 months.

 

8) Vendors we commonly use (examples)

• Essential: Cloud hosting/CDN/load balancer; ThriveCart (minimal checkout cookies).
• Functional: Paperbell embed (scheduler), Zoom web launcher (meeting helper), YouTube/Vimeo player preferences.
• Analytics: Google Analytics (with Consent Mode); may use privacy-friendly analytics alternatives.
• Advertising: Google Ads/Remarketing; Meta Ads (Pixel); Pinterest Tag; LinkedIn Insight Tag.
• Social/video embeds: YouTube/Vimeo players; Instagram/Pinterest/LinkedIn widgets may set cookies when you view or interact with embedded posts.
• Automation & infra: Make/Zapier (no public trackers on site pages), Google Workspace.

 

9) AI & tracking clarification

We do not use AI to fingerprint or track you across sites. Any AI-assisted processing we use is admin-only (e.g., transforming transcripts to summaries/checklists, tagging our own resources, drafting reminders, synthesising public info) and not for advertising profiles. If a vendor that supports these admin workflows sets cookies, they appear in the categories above and only run with the relevant consent (except Strictly Necessary).

 

10) Manage / withdraw consent & GPC

• Use Manage cookie preferences by clicking on the cookie icon on any page any time to change or withdraw consent.
• If your browser sends a GPC signal, we treat it as an opt-out of Advertising/Retargeting where legally recognised (e.g., certain US states).
• We typically re-ask for consent at 6 months (EU/UK) and 12 months (AU/US/ROW), or sooner if vendors/purposes change.

 

11) California & US state laws (CPRA et al.)

We do not sell personal information. If ad cookies/pixels could be deemed “sharing” for cross-context advertising, you may opt out by turning Advertising/Retargeting off in Manage cookie preferences, using a GPC-enabled browser, or contacting support@michelleharpas.com. If your CMP requires it, we’ll surface a “Do Not Sell or Share My Personal Information” link in the footer.

 

12) Social advertising audiences

If we use platform tools to create custom or look-alike audiences (for example, Meta, LinkedIn, Pinterest), we do so in line with your consent settings and applicable law. You can opt out by turning off “Advertising/Retargeting” in Manage cookie preferences, enabling a GPC-enabled browser where supported, using each platform’s ad controls, or emailing us to be added to a suppression list for custom audiences.

 

13) Google Consent Mode & analytics specifics

When Analytics is enabled, we may use Google Analytics (Consent Mode) or a privacy-friendly analytics alternative. Without consent, tags operate in a limited mode and avoid writing/reading non-essential cookies.

 

14) International transfers

Some vendors process data outside Australia. We use safeguards such as Standard Contractual Clauses and vendor security controls. See our Privacy Policy for more.

 

15) How to manage cookies in your browser

You can also clear or block cookies directly in your browser/device. Features may be affected. Learn more at:

• allaboutcookies.org
• youronlinechoices.eu (EU)
• networkadvertising.org/choices (US)

 

16) Changes to this policy

We’ll update this page if our practices change. The Effective date shows the latest version.

 

17) Need help?

Questions or requests about cookies and consent: support@michelleharpas.com
We aim to respond within 48 hours.

 

18) Change Log

Date	Change
15 December 2021	First Publication
12 Nov 2025	Updated categories & lifespans; added Consent Mode & GPC; clarified Paperbell/Zoom functional cookies; added AI not used for tracking statement.
13 Nov 2025	Added Pinterest & LinkedIn to vendors; documented CMP consent logs and re-prompt cadence; clarified social advertising audiences with opt-out routes (banner, GPC, platform controls, suppression list).