Cookie Policy

Cookie Policy ⚓

How we use cookies and similar technologies on otaa.com

Last updated: 30 March 2026

What are cookies?

Cookies are small text files placed on your device when you visit a website. They help the site remember your preferences, understand how you use the site, and deliver a better experience. Some cookies are essential for the site to work. Others help us analyse traffic, personalise content, and deliver relevant advertising.

This Cookie Policy explains what cookies and similar tracking technologies we use on www.otaa.com, why we use them, and how you can manage your preferences. This policy should be read alongside our Privacy Policy, which explains how we handle your personal information more broadly.

Data controller: Burke Road Pty Ltd, trading as OTAA, is the data controller responsible for cookies placed on otaa.com. Contact us at hello@otaa.com.

How we manage consent

European Economic Area & United Kingdom: When you first visit our website from the EEA or UK, we display a cookie consent banner. Non-essential cookies (analytics, marketing, functional) are not loaded until you provide consent. You can manage your preferences at any time by clicking "Cookie Settings" in our website footer.

United States: Non-essential cookies may be loaded by default when you visit our website. Under the California Consumer Privacy Act (CCPA/CPRA), to the extent that advertising cookies constitute "sharing" of personal information for cross-context behavioural advertising, you have the right to opt out. You can do this by clicking "Cookie Settings" in our website footer or by enabling a Global Privacy Control (GPC) signal in your browser. We honour GPC signals as a valid opt-out request.

Australia & Rest of World: Non-essential cookies may be loaded by default when you visit our website. You can opt out at any time by clicking "Cookie Settings" in our website footer, adjusting your browser settings to block or delete cookies, or enabling a GPC signal in your browser.

Regardless of your location, you can always manage cookies via Cookie Settings in our footer, your browser settings, or a GPC signal. Blocking non-essential cookies may affect some website features such as personalised product recommendations and saved preferences.

Essential cookies (always active)

These cookies are strictly necessary for the website to function. They enable your shopping cart, secure checkout, session management, and country detection. They do not require consent and cannot be switched off.

_session_id
Provider: Shopify · Duration: Session · Stores your browsing session data including referrer and landing page

_secure_session_id
Provider: Shopify · Duration: Session · Secure session identifier for encrypted connections

cart
Provider: Shopify · Duration: 2 weeks · Stores the contents of your shopping cart

storefront_digest
Provider: Shopify · Duration: Indefinite · Verifies store access authorisation

_shopify_country
Provider: Shopify · Duration: Session · Detects your country for localised content, currency, and shipping options

Accessibility preferences
Provider: Accessibly · Duration: Varies · Stores your accessibility settings such as font size, contrast, and reading preferences so they persist between pages

Analytics cookies

These cookies help us understand how visitors interact with our website — which pages are visited, how long people spend, and where traffic comes from. This data helps us improve the website. For EEA/UK visitors, these require consent before loading.

_ga, _ga_*
Provider: Google Analytics (GA4) · Duration: 14 months · Distinguishes unique users, measures page views, sessions, and traffic sources

_shopify_visit
Provider: Shopify · Duration: 30 minutes · Tracks the number of visits to the store

_shopify_uniq
Provider: Shopify · Duration: Until midnight · Counts unique visitors to the store

TripleWhale cookies / pixel
Provider: Triple Whale · Duration: Varies · Attribution tracking that measures which marketing channels and campaigns drive visits, add-to-carts, and purchases. Used for internal marketing analytics

Intelligems cookies
Provider: Intelligems · Duration: Varies · Powers A/B testing and conversion rate optimisation experiments. Assigns you to a test group and remembers which variant you were shown

Marketing and advertising cookies

These cookies deliver advertisements relevant to you and measure campaign effectiveness. They track browsing activity and are set by our advertising partners through pixels and tags on our site. For EEA/UK visitors, these require consent before loading.

_fbp, _fbc
Provider: Meta (Facebook / Instagram) · Duration: 90 days · Tracks website interactions for ad targeting, retargeting, and conversion measurement across Facebook and Instagram

_gcl_au, _gcl_aw
Provider: Google Ads · Duration: 90 days · Tracks ad clicks and conversions from Google search and display advertising

_ttp, _tt_enable_cookie
Provider: TikTok · Duration: 13 months · Tracks website events for TikTok ad optimisation and conversion measurement

_pin_unauth
Provider: Pinterest · Duration: 1 year · Tracks conversions from Pinterest advertising

__kla_id
Provider: Klaviyo · Duration: 2 years · Identifies returning visitors for email and SMS marketing personalisation, on-site behaviour tracking, and abandoned cart recovery

SMPS / Google Customer Reviews cookies
Provider: Google (via SMPS integration) · Duration: Varies · Delivers post-purchase review survey invitations and collects Google Customer Reviews for seller ratings

Functional cookies

These cookies enable enhanced functionality and personalisation such as product recommendations, reviews, search, and customer support. Disabling them may affect your browsing experience.

Rebuy cookies / local storage
Provider: Rebuy · Duration: Varies · Powers personalised product recommendations, cross-sell modules, and "Complete the Look" suggestions based on your browsing and purchase history

Boost AI cookies / local storage
Provider: Boost Commerce · Duration: Varies · Powers site search, product filtering, and search suggestions. May store recent search queries and filter preferences

Yotpo cookies
Provider: Yotpo · Duration: Varies · Powers product reviews and ratings display, tracks review submissions and helpfulness votes

Trustpilot cookies
Provider: Trustpilot · Duration: Varies · Powers business review widgets and may deliver post-purchase review invitations

Zendesk cookies
Provider: Zendesk · Duration: Varies · Powers the customer support widget. Loaded when you interact with our help centre or support chat

Loop Returns cookies
Provider: Loop Returns · Duration: Varies · Powers the returns and exchanges portal. Sets session cookies when you initiate a return at www.otaa.com/apps/returns

Wonderment cookies
Provider: Wonderment · Duration: Varies · Powers branded order tracking pages. May set session cookies when you view your order tracking status

Server-side tracking (Converge)

In addition to browser-based cookies and pixels, we use Converge, a server-side tracking platform, to send conversion events (such as page views, add-to-cart events, and purchases) directly from our servers to advertising platforms including Meta (Facebook Conversions API), Google (Google Ads API), TikTok (Events API), and others.

Server-side tracking improves the accuracy of advertising measurement and reduces reliance on browser-based cookies. Data sent via Converge may include order details, hashed email addresses, and IP addresses.

For EEA & UK visitors: Where you have declined marketing cookies via our consent banner, we take steps to limit server-side data sharing in accordance with your preferences. However, certain aggregated or anonymised conversion data may still be transmitted for campaign measurement purposes where a legitimate interest basis applies. We are continuously working to ensure our server-side tracking fully respects your consent choices.

For more information about how Converge processes data, visit runconverge.com/privacy. The advertising platforms receiving this data process it under their own privacy policies — see the opt-out links in the "Managing your preferences" section below.

Other tracking technologies

In addition to cookies, we use similar technologies:

Pixels and tracking tags. Small pieces of code on our website that send data to advertising platforms (Meta Pixel, Google Ads tag, TikTok Pixel, Pinterest Tag, Triple Whale Pixel) when you visit a page, view a product, add to cart, or complete a purchase.

Local storage and session storage. Some features (including Rebuy product recommendations, Boost AI search, and accessibility preferences) use your browser's local or session storage to save data. This data remains on your device and is not transmitted to our servers unless required for functionality.

Server-to-server connections. Converge sends conversion events directly from our servers to advertising platforms (see "Server-side tracking" above). This data transmission occurs independently of browser cookies.

Product feed syndication. DataFeedWatch transmits product data (titles, descriptions, pricing, availability) to advertising platforms and marketplaces for product listing ads. This does not involve personal data or cookies but is listed for transparency.

Managing your preferences

You have several options for managing cookies and tracking:

Cookie Settings. Click "Cookie Settings" in our website footer to update your consent choices at any time.

Browser settings. Most browsers allow you to block or delete cookies. Note that blocking all cookies will affect website functionality, including your shopping cart and checkout.

Global Privacy Control (GPC). Enable a GPC signal in your browser. We honour GPC as a valid opt-out of non-essential cookies and "sharing" under the CCPA/CPRA.

Platform opt-outs. Opt out of specific advertising platforms directly:
Google: adssettings.google.com
Meta: facebook.com/ads/preferences
TikTok: tiktok.com/privacy/ads-and-your-data
Pinterest: pinterest.com/settings/privacy

Industry opt-outs. Opt out of interest-based advertising at youronlinechoices.com (EU) or optout.aboutads.info (US).

International data transfers

Data collected through cookies and server-side tracking may be transferred to and processed in the United States, Canada, and other countries where our service providers operate. Where data is transferred outside the European Economic Area or United Kingdom, appropriate safeguards are in place as described in our Privacy Policy, including Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.

Your rights

Depending on your location, you have specific rights regarding cookies and tracking:

EEA & UK (GDPR / ePrivacy Directive). Non-essential cookies require your prior consent. Our cookie banner is displayed on your first visit. You can withdraw consent at any time via Cookie Settings. Consent is managed by category (analytics, marketing, functional).

California (CCPA / CPRA). To the extent that advertising cookies and server-side tracking constitute "sharing" of personal information for cross-context behavioural advertising, you have the right to opt out. Use Cookie Settings, enable a GPC signal, or email us at hello@otaa.com with subject line "California Privacy Request." We do not sell personal information collected through cookies.

Australia (Privacy Act 1988). Australia does not currently have a cookie-specific consent law equivalent to the ePrivacy Directive. We provide opt-out mechanisms for all visitors via Cookie Settings and browser controls as a matter of best practice and in anticipation of evolving Australian privacy legislation.

Do Not Track / GPC. Our website does not currently respond to browser Do Not Track (DNT) signals as there is no industry standard for DNT. We do honour Global Privacy Control (GPC) signals as a valid opt-out of non-essential cookies and data sharing under the CCPA/CPRA.

Changes to this policy

We may update this Cookie Policy from time to time to reflect changes in our technology, legal requirements, or the cookies we use. When we make changes, we update the "Last updated" date at the top of this page. Material changes that affect how we use non-essential cookies will require fresh consent from EEA/UK visitors via our cookie banner.

We recommend running a periodic review of this page to stay informed about how we use cookies. We also commit to conducting regular cookie audits to ensure this policy accurately reflects the cookies and tracking technologies active on our website.

Questions?

Got a question about cookies or how we track data? Reach us however suits you best:

Email: hello@otaa.com
Phone: 1800 531 670
WhatsApp: +61 410 280 081

OTAA
Burke Road Pty Ltd
20 Columbia Court, Dandenong South, Victoria 3175, Australia

Business Hours: Monday to Friday, 9:00 AM – 5:00 PM AEST

For more detail on how we collect, use, and protect your personal information, see our Privacy Policy.

For GDPR-specific enquiries, email with subject line "GDPR Request."

For CCPA/CPRA requests, email with subject line "California Privacy Request."

⚓ hello@otaa.com · Mon–Fri, 9am–5pm AEST

Last updated: 30 March 2026