Cookie Policy

This Cookie Policy explains how Shri Balaji Overseas Trading Company ("Pala-G India", "we") uses cookies and similar tracking technologies on palagindia.com. It supplements our Privacy Policy. This document is provided under the Digital Personal Data Protection Act, 2023, the EU General Data Protection Regulation (GDPR) and the UK Privacy and Electronic Communications Regulations (PECR) where applicable.

1. What are cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, or work more efficiently, and to provide information to site owners. Similar technologies include pixels, tags, local storage, session storage, and SDKs.

2. Categories of cookies we use

Strictly necessary (always on): Session management, cart state, CSRF protection, secure login, fraud prevention. These cannot be disabled without breaking the site.
Functional (consent): Remembered preferences (currency, region, language), recently viewed products, wishlist state.
Analytics (consent): Google Analytics 4 (including Google Signals), Shopify Analytics, Microsoft Clarity (session recordings and heatmaps; sensitive fields are masked) — traffic and behaviour measurement.
Marketing (consent): Meta Pixel / Meta Conversions API, Google Ads remarketing, WhatsApp Business API click tracking.

3. Consent model

When you first visit palagindia.com we show a cookie banner with two choices: "Accept All" and "Essential Only". Analytics and advertising cookies are set only after you click "Accept All". Before you choose — and if you choose "Essential Only" — Google's tag runs in Consent Mode: it sets no cookies and sends only limited cookieless signals, which Google uses to model aggregate measurement. You can change or withdraw your choice at any time via "Cookie Settings" in the website footer, or by contacting us at Ourpalag@gmail.com.

4. Third parties that set cookies through our site

Shopify Inc. (Canada) — platform hosting, cart, checkout.
Google LLC (USA) — Google Analytics 4, Google Tag Manager, Google Ads (only if marketing consent given).
Meta Platforms Ireland Ltd — Meta Pixel, Meta Conversions API (only if marketing consent given).
Microsoft Corporation (USA) — Microsoft Clarity session recordings and heatmaps (only if you click "Accept All").
Shiprocket — Fastrr checkout (Bigfoot Retail Solutions Pvt Ltd, India) — checkout, delivery and checkout fraud-prevention; sets its own cookies to run checkout and may measure checkout events for Meta and Google.
Razorpay Software Pvt Ltd (India) — payment gateway at checkout.
Cloudflare Inc. (USA) — CDN and bot protection.

Each of these providers processes data under their own privacy policy, which you are encouraged to review.

5. Your choices

You can disable cookies entirely via your browser settings, but parts of the site (checkout, login) may stop working. Most browsers accept cookies by default; you can change that in settings under "Privacy" or "Cookies".

6. Do Not Track

Our website does not currently respond to "Do Not Track" browser headers because no industry-wide standard exists. We honour consent chosen via our own banner instead.

7. Updates

We may update this policy; the "Last updated" date below changes when we do. Material changes (adding a new category of cookie, changing a processor) will re-prompt the consent banner.

Last updated: September 2026