Cookie & Tracking Technologies Policy

This Cookie & Tracking Technologies Policy (“Policy”) explains how Utmost Province Co. (“Utmost Province,” “we,” “us,” or “our”) uses cookies, pixels, tags, device identifiers, and similar technologies (collectively, “cookies”) on https://utmostprovince.com and all related pages, experiences, and marketing surfaces operated by us.

This Policy applies worldwide to all visitors and customers, regardless of location, and should be read together with our Privacy Policy, Terms of Service, and Data / Opt-Out page. Where local law grants you stronger rights, we will honor those rights to the minimum extent required by law.

1. What Are Cookies?

Cookies are small text files that a website or online service places on your device to recognize your browser, store preferences, enable core functionality (like cart and checkout), secure your session, and help us improve performance. We also use web beacons, pixels, tags, SDKs, and similar technologies that may operate together with cookies.

2. Who Sets the Cookies?

Cookies may be placed on your device by:

• First-party cookies — set directly by Utmost Province Co. or our Shopify storefront.
• Third-party cookies — set by approved providers that perform services for us, such as Shopify, Omnisend (email/SMS), BON Loyalty, Pandectes GDPR/CCPA, analytics, and advertising/retargeting platforms (e.g., Google, Meta).

We only enable third-party tools that are necessary to operate our store, fulfill orders, detect fraud, improve customer experience, or deliver marketing to customers who have consented.

3. Technologies We Use

We currently operate our store primarily on the Shopify platform and use a combination of Shopify-native and app-based tools, which may set cookies and similar identifiers. These may include:

• Shopify core & checkout cookies (to run the store, remember your cart, maintain secure sessions, and detect fraud);
• Pandectes for consent management, geo-based banners, Global Privacy Control (GPC) handling, and state/EU/UK compliance;
• Omnisend for email marketing, SMS marketing (where you have opted in), cart recovery, and audience-based messaging;
• BON Loyalty / UP Rewards for rewards tracking, point accrual, and user recognition;
• Analytics & performance such as Google Analytics and Shopify analytics to understand traffic and improve the site;
• Advertising / retargeting pixels (e.g. Meta/Facebook, Google Ads) to show you relevant ads on other sites — only where permitted or consented.

4. Types of Cookies We Use

• Strictly Necessary Cookies – required for the website and checkout to function (security, fraud prevention, cart, login). You cannot opt out of these via our banner because the site will not work correctly without them.
• Performance & Analytics Cookies – help us understand how visitors use our site, what pages are popular, and how to improve UX for mobile and desktop.
• Functional Cookies – remember preferences, region, language, and store settings to provide a personalized experience.
• Advertising, Targeting & Social Cookies – help us market to you based on your interests, limit ad frequency, measure campaign performance, and build audiences (where allowed). In some U.S. states and regions, this may be considered a “sale,” “sharing,” or “targeted advertising.”

5. Consent, Banners & GPC

Because we use Pandectes to manage consent, you may see a cookie banner or preferences panel depending on where you access the site. Through that banner you can:

• Accept all non-essential cookies,
• Reject non-essential cookies, or
• Customize your preferences by category.

If your browser sends a valid Global Privacy Control (GPC) signal, we will treat it as a cross-site opt-out for that browser/device where required by applicable U.S. state privacy laws or comparable frameworks.

Please note: clearing your cookies, switching browsers, using private mode, or accessing from a new device may require you to re-submit or re-save your cookie preferences.

6. Your Choices & Opt-Outs

You can control cookies in several ways:

• Via our on-site cookie banner/preference center (where available);
• Via your browser controls (to block or delete cookies);
• Via our dedicated page: https://utmostprovince.com/pages/data-opt-out (U.S. state privacy requests, “do not sell/share,” targeted advertising opt-out);
• By unsubscribing or changing preferences in Omnisend emails/SMS if you opted in to receive marketing;
• By enabling the Global Privacy Control (GPC) signal in your browser.

Some features, such as loyalty tracking, personalized recommendations, and retargeting, may not function if you disable cookies.

7. SMS & Email Marketing Cookies (Omnisend)

If you sign up for email or SMS marketing via Omnisend, Omnisend may set or read cookies and tracking pixels to:

• record that you signed up,
• track cart reminders and browse-abandonment flows,
• measure the performance of campaigns, and
• ensure messages are sent only to people who opted in.

You can opt out at any time using the links or instructions in the email/SMS or by contacting us at privacy@utmostprovince.com.

8. International / Worldwide Application

This Policy applies to all visitors and customers globally. Because data protection and ePrivacy rules differ by country, we implement a “highest reasonable protection” approach through our consent tool (Pandectes) and Shopify’s built-in privacy features. Where your local law mandates stricter consent (for example, EU/EEA/UK), we will honor that standard for you.

9. Breach of Cookie Policy = Breach of Terms

Attempting to bypass, disable, falsify, or manipulate our cookie banner, consent signals, or tracking controls; scraping data in violation of our Acceptable Use Policy; or deploying automated tools to collect data in spite of a refusal of consent is considered a material breach of our Terms of Service.

Upon such breach, we reserve the right to block access, terminate accounts, cancel orders, revoke loyalty benefits, and pursue all remedies available at law (including damages) to protect our customers, our IP, and our infrastructure.

10. Data Sharing & “Sale” / “Sharing” / Targeted Advertising

In certain U.S. states, using advertising or analytics cookies with third parties may be considered a “sale,” “sharing,” or “targeted advertising.” Where that definition applies, you may opt out via:

• our on-site banner (when shown),
• our data page: https://utmostprovince.com/pages/data-opt-out, or
• sending us an email at privacy@utmostprovince.com with your request.

11. Security & Retention

Cookies themselves do not typically contain personal data, but they may be linked to personal data we hold about you. We retain cookie-related data only as long as necessary for the purpose collected (for example, session-based security vs. long-lived analytics) and in line with our Privacy Policy.

12. Accessibility

If you need this Cookie & Tracking Technologies Policy in another format for accessibility reasons, contact us at clientservices@utmostprovince.com or privacy@utmostprovince.com and we will provide an alternative format.

13. Updates to This Policy

We may update this Policy to reflect changes to our technologies, our vendors (for example, adding ShipStation or new analytics), legal requirements, or our business. When we make material changes, we will update the “Last updated” date above. Your continued use of the site after changes are posted means you accept the updated Policy.

14. Contact

Utmost Province Co.
7109 Gillis Johnson Street
Fort Worth, TX 76179
United States

Privacy & Data: privacy@utmostprovince.com

Customer Service: clientservices@utmostprovince.com

Data / Opt-Out: https://utmostprovince.com/pages/data-opt-out