COOKIE POLICY

1. Purpose and scope

This Policy applies to the Studio Orris public website and associated webpages or digital experiences on which it is displayed or linked. It explains what cookies and similar technologies are, why they are used, the technologies currently in use, the information involved, service-provider involvement, preference controls, duration and how to contact us.

This Policy does not replace our Privacy Policy. Where information collected through a cookie, pixel or similar technology constitutes personal information under applicable law, we handle it in accordance with the Privacy Policy and applicable privacy requirements.

The technology register describes this public website. It does not describe cookies on independently operated websites you reach through an external link, or separate administrative or client systems.

2. What are cookies?

Cookies are small data files a website may place or access on your browser or device. They can enable website functions, maintain secure sessions, remember privacy choices or, when those services are enabled, support measurement and marketing.

• Session cookies generally expire when the browser session ends.
• Persistent cookies remain for a defined period or until deleted.
• First-party cookies are set or controlled by the website or its infrastructure.
• Third-party cookies are set or controlled by an external provider whose technology is integrated into a website.

These descriptions explain the types of cookies generally available; they do not mean every type is used here. The register identifies the actual entries used by this implementation.

3. Similar technologies

Similar technologies can include pixels, web beacons, tags, software tools, local storage, session storage, browser identifiers and server-side measurement. For simplicity, this Policy refers collectively to “cookies and similar technologies”.

This public website uses session storage for the opening reveal and navigation scroll restoration. Session storage is held in your browser for the tab session; browsers may preserve it when restoring tabs. The public website does not currently use browser local storage for analytics or marketing.

Pixels and other external scripts can transmit information when a page loads, even without placing a cookie. We therefore review information collection and disclosure by the technology itself, rather than assessing only whether it stores a cookie. No such optional tracking script is enabled in the current implementation.

4. Our approach to privacy and tracking

We seek to use these technologies proportionately and configure information collection so that it is limited to what is reasonably required for its purpose.

We do not intend to use tracking technologies to collect sensitive information unless collection is lawful, reasonably necessary for the relevant function or activity and any legally required consent has been obtained.

We seek to avoid unnecessarily transmitting enquiry, recruitment or account-field content to analytics or advertising providers. Where third-party technologies are introduced, their configuration, purpose and information flows should be reviewed before deployment and periodically afterwards.

5. Technologies currently used

Strictly necessary and website-operation technologies

The consent-preference cookie remembers your privacy choice. Browser-tab preferences avoid repeating the opening reveal and restore scroll positions during navigation. These first-party website-operation features are not used for behavioural advertising or unrelated marketing and are not switched off by Cookie Settings.

The preference cookie is written when you select an action that saves a choice; it is not set merely because you scroll or continue browsing. Session preferences can operate before you make that choice.

Current optional-technology status

Studio Orris does not currently activate analytics cookies or analytics tracking scripts through this public website. There is no active Analytics category to enable at present.

Studio Orris does not currently activate marketing cookies through this website. If this changes, this Policy and our Cookie Settings will be updated before or when those technologies are introduced.

No separate optional Functional category is currently deployed. Cookie Settings shows optional categories only when a corresponding technology has been registered. Introducing a new optional category requires an updated disclosure and preference version, so an earlier necessary-only choice does not authorise new tracking.

6. Information involved

The consent record contains the preference-policy version, the enabled or rejected optional-category flags and the date and time of your selection. It does not store enquiry messages, newsletter details, payment information or a personal profile.

The opening-reveal record stores a completion flag. Navigation storage retains scroll coordinates and navigation-entry keys, with a page address used by the router as a fallback where an entry key is unavailable. These preferences remain in browser session storage; they are not sent as an analytics event stream.

The preference cookie can accompany requests to this website according to your browser’s cookie rules. Session-storage entries are not included in those request headers.

Normal page and asset requests convey information such as an IP address, browser request headers, the requested resource and potentially a referring page to the infrastructure delivering the request. This is distinct from deploying a cookie-based analytics service. The Privacy Policy addresses broader technical and personal-information handling.

Some technical information may constitute personal information where an individual is reasonably identifiable from it alone or together with other information. We do not assume information is anonymous simply because a name is not collected.

7. Information we do not intend to collect through optional tracking

We do not intend to configure optional tracking to collect the contents of contact messages, passwords, payment-card details, account credentials, employment applications, government identifiers, health information or other sensitive form content.

No optional tracking integration currently receives public form-field events. An enquiry or Club De Orris™ subscription is sent through the website’s form service only when you intentionally submit that form. This is service delivery, not cookie consent or analytics permission.

If tracking is introduced on pages that contain personal or sensitive information, its configuration should be checked to prevent unnecessary disclosure of those fields.

8. Why we use cookies and similar technologies

The technologies currently listed support privacy-preference memory, the once-per-session opening reveal and navigation continuity. We seek to use no more information than is reasonably required for those functions.

If optional analytics or marketing is introduced, its actual purposes, providers and information flows will be disclosed and its activation controlled through the relevant preference. Continuing to browse will not authorise those technologies.

9. Legal and privacy basis for our approach

Australian law does not treat all cookies as a single category or universally require opt-in consent for every cookie. Applicable obligations depend on the information collected, whether it is personal or sensitive information, its purpose, its use or disclosure and involvement of third parties.

To the extent the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to Studio Orris, information obtained through these technologies will be handled consistently with applicable requirements for transparency, lawful and fair collection, collection notices, use and disclosure, direct marketing, cross-border disclosures, data quality, security, access and correction.

We provide controls over non-essential technologies as part of our privacy and transparency approach. This Policy does not reduce any rights an individual has under applicable law.

10. Consent and cookie preferences

When you first visit, the notice offers Accept all, Reject non-essential and Manage preferences. Strictly necessary and website-operation technologies remain available to support their disclosed functions.

No optional category is presently deployed. Accept all and Reject non-essential therefore both save a necessary-only choice. The preference centre explains this instead of presenting switches for technologies that are not in use.

If an optional category is introduced, it will default to off and its registered technology must remain disabled until an affirmative choice permits it. We do not treat scrolling, continued browsing, closing a notice or inactivity as consent to optional technologies.

11. Changing or withdrawing your choice

You can review or change your preference at any time using Cookie Settings in the global footer, this Policy or the Privacy Policy.

A saved change updates permitted categories from that point forward. Registered technologies must stop collection and, where technically possible, remove their optional first-party storage when permission is withdrawn. There is no optional tracking storage to remove in the present implementation.

A later change cannot undo information already transmitted to a provider. Where a provider is used, its retention and deletion practices may continue to apply. Deleting cookies or browser storage may remove the preference record and cause the website to ask again.

12. Cookie preference record

We store a first-party preference record so you do not need to make the same choice on every page. It records the policy version, category choices and the date of the latest selection. The record itself is strictly necessary to remember those choices.

The configured lifetime is up to 180 days from your latest saved selection. Your browser may delete or block it earlier. If your browser prevents saving, the choice applies to the current visit and you may be asked again on a later visit.

You may be asked to review preferences if the record expires, is deleted, is invalid or belongs to an earlier preference-policy version. Material changes to the consent model or introduction of optional technologies require a preference-version update.

13. Cookie and technology register

This register describes the first-party technologies verified in the current public website implementation. Cookie durations refer to browser storage, not a universal retention period for server logs or submitted enquiries.

No Google tracking or measurement service, advertising or social-media pixel, or third-party embedded-player tracking integration is enabled by the current public website code. There are no optional analytics or marketing entries to list.

14. Third-party providers

The website is built and delivered using Lovable’s website platform and hosting/asset infrastructure. Providers delivering a page or asset receive the requests necessary to serve it, which can include network and browser information. That does not itself mean an analytics or advertising cookie is deployed.

Supabase is the configured server-side service for storing submitted enquiries and Club De Orris™ subscription details, recruitment applications and staff authentication. Those details are provided when you submit the corresponding form. Supabase is not used here as a public-site analytics or advertising service, and form submission does not grant cookie or newsletter permission beyond the choices you expressly make.

TanStack Router is software running within this website, not a third-party analytics recipient. Its scroll-restoration storage remains first party.

Where an external provider handles information, its applicable privacy practices may also apply. We seek to assess providers and configure technologies for their intended purposes, but do not control every aspect of a provider’s independent systems. Our Privacy Policy explains broader service-provider disclosures.

15. Embedded content and external links

The current public website serves photography and video as media files rather than loading external video, map or social-feed player frames. It does not currently activate a third-party embed that places optional tracking cookies.

Links to social profiles and other external websites take you to independently operated services. Once you follow a link, that service may use its own cookies and privacy controls. Accepting this website’s cookie notice does not change those controls.

If optional external embeds are introduced, their providers and purposes will be identified in the register. Where appropriate and technically practicable, non-essential technologies associated with them will remain inactive until the relevant preference is given.

16. Cross-border processing

Website infrastructure and service providers may process or store information outside Australia. The current browser preference records are first party and held on your device; that does not establish where providers process normal network requests or submitted form information.

Where personal information is disclosed overseas, we will address applicable cross-border privacy obligations in accordance with our Privacy Policy and applicable law. We do not infer a hosting country from a provider’s brand, a domain name or the location of your device.

For questions about relevant provider locations or overseas handling, contact legal@studioorris.com.au. Broader overseas disclosures are addressed in our Privacy Policy.

17. Direct marketing

Where personal information is used for direct marketing, we handle it in accordance with applicable privacy and marketing requirements. We will not knowingly use sensitive information for direct marketing unless legally permitted and any required consent has been obtained.

Cookie preferences do not replace separate permission for email marketing or direct communications. Joining Club De Orris™ requires its own subscription action and consent. Cookie acceptance does not subscribe you, authorise recruitment communications or accept an enquiry-form privacy statement.

18. Security

We take reasonable steps appropriate to the circumstances to protect personal information under our control from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may be organisational, technical and contractual, according to the information and services involved.

No website or browser storage mechanism can be guaranteed completely secure. This Policy describes purposes and choices without disclosing sensitive security configuration.

19. Retention

Retention differs by technology and purpose. The register gives the configured lifetime of the preference cookie and the browser-session scope of session storage. Browser restrictions, clearing data or restoring a session can affect how long an entry remains available.

Information submitted in an enquiry or subscription, and infrastructure records, may be subject to different retention practices under the Privacy Policy. A cookie’s expiry does not define the retention of information already received by a service provider. We do not claim a single retention period for all information.

If analytics is introduced, browser-cookie lifetimes and any separate account-level information retention will need to be described according to the actual service configuration.

20. Browser controls

Most browsers allow you to view, block or delete cookies and other website storage. Those controls are separate from Studio Orris Cookie Settings. Blocking storage may prevent a choice being remembered or affect navigation and opening-reveal preferences.

You do not need to use browser controls to reject any optional technology offered by this website; Cookie Settings provides that choice. If scripting or cookies are disabled, browser controls remain available and the site may be unable to retain a preference.

21. Changes to this Policy

We may update this Policy to reflect changes in website technologies, information-handling practices, providers, consent controls, applicable law, regulatory guidance or other operational requirements.

Material changes may be accompanied by an updated “Last updated” date and a request to review Cookie Settings. Changes that introduce new optional technologies require an updated consent version before activation. Please review this page periodically.

22. Relationship with our Privacy Policy

This Policy supplements the Privacy Policy, which explains broader personal-information collection and holding, purposes of use and disclosure, security, access and correction, privacy complaints and overseas disclosures.

Where cookie or similar-technology information constitutes personal information, the Privacy Policy applies to it. Read our Privacy Policy or review your Cookie Settings.

23. Privacy questions and complaints

Contact Studio Orris™ Australia, Privacy & Legal, at legal@studioorris.com.au with questions about this Policy, these technologies or the handling of information obtained through them.

We will consider and respond to relevant enquiries and complaints in accordance with our Privacy Policy and applicable obligations. Please contact us first so we can investigate and address the matter.

If you are dissatisfied with the outcome and the matter is within its jurisdiction, you may have a right to contact the Office of the Australian Information Commissioner (OAIC). The OAIC is not the first point of contact for ordinary Studio Orris enquiries.

24. Contact

For cookies, tracking technologies, privacy preferences or this Policy: legal@studioorris.com.au.

Studio Orris™ Australia
Operated by JENCEN GROUP PTY LTD
ACN 702 081 132

For general Studio Orris enquiries, please use the verified details on our Contact page.