Cookies and Tracking Notice
Last updated 13 November 2026
1. Scope
This notice explains the cookies, local storage, pixels, software development kits and similar technologies used on bouteek.ae, store.bouteek.ae and seller.bouteek.ae, operated by BOUTEEK MARKETPLACE FOR E-TRANSACTION COMPLEX - L.L.C. It is read together with the Privacy Notice.
2. Categories and purposes
Necessary technologies support sign-in and the session (_medusa_jwt), sign-in with Google or Facebook (_bouteek_social_pending), the cart (_medusa_cart_id), the shopping country (_medusa_country) caching of shop pages (_medusa_cache_id) and your cookie choice (bouteek_consent). Describing something as "necessary" does not mean that every tool useful to us is necessary. Preference technologies may save the language or verified display choices, and analytics are used to measure page use, conversion paths and performance. Session replay or advertising is included only if it is enabled and listed in the public register.
3. Your choices
Where consent is required, optional technologies stay off until you choose to turn them on, and the cookie banner and the Cookie settings link at the bottom of every page let you accept, reject or choose categories and change your decision later. Rejecting optional tracking does not prevent normal access to the service, optional categories are not pre-selected, and the minimum evidence of consent is kept for the approved period.
You may also manage or restrict cookies through your browser settings, bearing in mind that disabling some necessary technologies may affect specific functions of the platform. Rejecting or deleting cookies does not necessarily delete data already sent to service providers, and requests to access or erase that data are subject to the provisions of the Privacy Notice. Consent choices are renewed when material changes are made that require it under the legislation in force.
4. Analytics and replay
The planned tools include GA4 and Microsoft Clarity, and listing them here is not evidence that they are running. Private AI prompts, identity documents, card details and passwords are not sent to events, page titles or recordings, and masking, page exclusions, parameters and permissions are checked before publication.
Analytics and session replay tools are subject to the approved privacy and consent settings according to how they are used, including user identifiers, advertising features, cross-domain tracking and consent management mechanisms, where these are actually enabled.
Bouteek takes appropriate technical measures to prevent passwords, payment card details, identity documents, the content of private AI inputs and unnecessary personal information from being recorded or sent, through masking settings, excluding sensitive pages and fields, and reviewing tracking events, link parameters and access permissions.
Session replay tools or optional tracking features are turned on only after their settings have been verified and the applicable disclosure and consent requirements have been met.
5. Providers and transfers
The register shows first-party and third-party tools, recipients, processing locations and retention. (to be confirmed). Rejecting cookies does not necessarily stop all processing that does not rely on them.
Some tracking and analytics service providers may process data under their own privacy policies and according to each one's role in the processing. Bouteek explains, according to the settings actually used, the categories of these providers and the related processing purposes, and provides the appropriate links to their privacy notices and information on international transfers where applicable, having regard to Bouteek's legal obligations.
6. Tracking register before publication
For each item: the tool, provider, key or script, domain, purpose, category, identifiers, first or third party, lifetime, retention, recipient, location, basis, consent trigger, link, technical owner and last check. Only the configuration actually applied is published.
The tracking register must distinguish between the lifetime of a cookie or technical identifier and the period for which the service provider keeps the data collected through it, as the two may differ. The register must be updated when new tools are added or when tracking settings, processing purposes or retention periods change, and the published register must reflect the technologies and settings actually used on the platform.
7. Contact and updates
Questions about privacy or preferences are sent to (to be confirmed). We update the notice and the consent controls before starting new optional processing where required.