Cookie policy
Version: 2.1
Last Updated: 21 April 2026
What Are Cookies
Who Sets Cookies on This Platform
Legal Basis for Using Cookies
Categories of Cookies We Use
Third-Party Services That Set Cookies
WordPress, Elementor, WooCommerce, and the Affiliate System
The Platform is built on WordPress with Elementor and uses WooCommerce for purchase processing. These platforms set first-party cookies and browser storage items that are necessary for the Platform to function. A full list is included in Section 4.1 above.
WordPress uses nonces (tokens embedded in forms and URLs, not browser cookies) for CSRF protection. No separate CSRF cookie is set.
WooCommerce sets two browser storage items (wc_cart_hash and wc_fragments) that are required for the checkout to function. These are localStorage and sessionStorage entries, not traditional cookies, but are documented here for full transparency as they involve the processing of session data.
The affiliate system is custom-built and sets three first-party cookies directly on wedding.jckfrut.co: affiliate_dashboard (session management for affiliate login), affiliate_landing (referral source attribution), and ref_click (link click tracking). These are documented in Sections 4.1 and 4.2 above. The affiliate system does not use any third-party affiliate platform and sets no third-party cookies.
How We Manage Your Consent
The CookieYes Consent Banner
When you first visit the Platform, a cookie consent banner managed by CookieYes will appear. This banner:
• Explains the categories of cookies we use.
• Allows you to accept all, decline all non-essential cookies, or customise preferences by category.
• Does not set any non-essential cookies before you make a choice.
• Stores your preference in the cookieyes-consent cookie for up to 1 year.
• Allows you to change your preferences at any time via the cookie settings link in the footer.
What Happens If You Decline
If you decline non-essential cookies:
• Analytics cookies (GA4, Hotjar, PixelYourSite, Sourcebuster.js) will not be set.
• Marketing cookies (Meta Pixel, Google Ads, YouTube targeting cookies) will not be set.
• Functional cookies for Google Sign-In and Google Maps will not be set unless you actively use those features.
• Strictly necessary cookies will still be set. You cannot decline these and continue to use the Platform.
Withdrawing Consent
You may withdraw or change your cookie consent at any time by clicking the “Cookie Settings” link in the footer, or by clearing your cookies in your browser settings (which will cause the consent banner to reappear on your next visit). Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.
Managing Cookies Through Your Browser
Most browsers allow you to view, delete, or block cookies through their settings. Please be aware that blocking cookies may affect Platform functionality. Browser-specific instructions:
• Google Chrome: https://support.google.com/chrome/answer/95647
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Apple Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
• Microsoft Edge: https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge
Advertising opt-outs:
• Google Ads: https://adssettings.google.com
• Meta Ads: https://www.facebook.com/adpreferences
• Your Online Choices (EEA): https://www.youronlinechoices.eu
• Network Advertising Initiative: https://optout.networkadvertising.org
International Data Transfers via Cookies
Some third-party services transfer data to servers outside South Africa and the EEA:
• Google LLC (US): GA4, Google Ads, Google Sign-In, Google Maps, YouTube. Covered by the EU-US Data Privacy Framework and Google’s Data Processing Agreement including SCCs for EEA users.
• Meta Platforms Inc. (US): Meta Pixel. Covered by the EU-US Data Privacy Framework.
• PixelYourSite: Data processed via Google and Meta infrastructure as described above.
• Hotjar Ltd (Malta, EU): Data processed within the EU and subject to GDPR.
• CookieYes Ltd (UK): Data processed under UK GDPR.
• Automattic Inc. (US): WooCommerce. Storage items are processed locally in your browser and on JCKFRUT’s Scala Hosting servers in accordance with POPIA Section 72.
Marketing cookies (Meta Pixel, Google Ads, YouTube) are blocked for EEA and UK users until explicit consent is given. No data is transferred to these providers before consent.
Updates to This Cookie Policy
We may update this Cookie Policy to reflect changes in cookies or third-party services we use, changes in applicable law, or changes to the Platform. When we make material changes, we will update the “Last Updated” date and reset the CookieYes consent banner so you are asked to review your preferences. The most current version is always available at https://wedding.jckfrut.co/cookie-policy.
Contact Us
For questions about this Cookie Policy:
JCKFRUT (Pty) Ltd
Attention: Information Officer
11th–14th Floor, Touchstone House, 7 Bree St, Cape Town City Centre, Cape Town, 8001, South Africa
Email: privacy@jckfrut.co
Website: https://wedding.jckfrut.co
EEA users may contact their national data protection supervisory authority. UK users may contact the ICO at ico.org.uk.
