Cookie Policy

1. Introduction

This Cookie Policy explains how Fizzyhorizon, Unipessoal Lda. (trading as Johnny Grape), with registered address at Aldeamento de Porches Lote 22B, 8400-498 Porches, Portugal, NIF 519 348 524 (“we”, “us”, or “the Company”) uses cookies and similar tracking technologies on our website www.johnnygrape.com (the “Website”).

This Cookie Policy should be read alongside our Privacy Policy, which provides broader information about how we collect and process your personal data, and our Terms of Service.

By using our Website, you acknowledge that you have read and understood this Cookie Policy. For non-essential cookies, we will ask for your consent before placing them on your device. You may update your cookie preferences at any time using the methods described in Section 7 of this policy.

2. Legal Framework

Our use of cookies is governed by the following legal instruments:

• ePrivacy Directive (Directive 2002/58/EC), as amended by Directive 2009/136/EC, transposed into Portuguese law by Law No. 41/2004 of 18 August 2004, as amended by Law No. 46/2012 of 29 August 2012
• General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679
• Law No. 58/2019 of 8 August 2019 — Portuguese law implementing the GDPR
• EDPB Guidelines 2/2023 on Technical Scope of Article 5(3) of the ePrivacy Directive, adopted 14 November 2023

Under Portuguese Law No. 41/2004, we may only store cookies on your device, or access information already stored, with your prior informed consent — except for cookies that are strictly necessary to provide a service you have expressly requested. Consent must be freely given, specific, informed, and unambiguous, and must be given by a clear affirmative action. Browsing the Website without interacting with our consent banner does not constitute valid consent.

3. What Are Cookies?

Cookies are small text files that are placed on your computer, tablet, smartphone, or other device when you visit a website. They are widely used to make websites work efficiently, provide useful functionality, and give website owners information about how their site is being used.

In addition to cookies, we may use other similar technologies including:

• Web beacons / tracking pixels — small, invisible images embedded in web pages or emails that record whether a page or email has been viewed. These are subject to the same consent requirements as cookies under EDPB Guidelines 2/2023
• Local storage and session storage — similar to cookies but stored in your browser’s local storage rather than as cookie files
• Browser fingerprinting — a technique that identifies your browser or device based on its technical characteristics. Where this is used to track you across sessions or websites, it falls within the scope of the ePrivacy Directive and requires consent
• Tracking links — links in emails or elsewhere that, when clicked, record that the link was followed. These are also subject to the ePrivacy framework

For simplicity, we refer to all of these technologies collectively as “cookies” throughout this policy.

4. Types of Cookies We Use

We use cookies in the following categories. Strictly necessary cookies are placed automatically. All other categories require your consent.

For a complete and up-to-date list of all cookies currently active on this Website — including their names, providers, purposes, and durations — please see our Cookie Declaration, which is maintained automatically by our Consent Management Platform and updated whenever our cookie usage changes. The sections below describe the categories of cookies we use and their general purposes.

4.1 Strictly Necessary Cookies

Strictly necessary cookies are essential for our Website to function. They enable core features such as page navigation, access to secure areas, shopping basket functionality, login, and age verification. Without these cookies, the Website cannot operate properly.

These cookies are placed by us (first-party) and do not collect information used for marketing purposes. We do not require your consent to place them and you cannot opt out of strictly necessary cookies while continuing to use the Website.

Strictly necessary cookies placed by us include cookies that maintain your session, preserve your shopping basket, protect against security threats such as cross-site request forgery, record that age verification has been completed, store your cookie consent preferences, and remember your selected currency or language.

4.2 Performance and Analytics Cookies

Analytics cookies collect information about how visitors use our Website — for example, which pages are visited most often, how long visitors spend on each page, how users navigate through the site, and any error messages encountered. This information is used to improve how our Website works. Where possible, data collected by analytics cookies is aggregated and anonymised.

These cookies require your consent.

Analytics cookies on our Website are placed by third-party analytics providers. These providers process data on our behalf and may transfer data outside the EEA. The specific analytics providers we use are identified in our Cookie Declaration. All analytics providers are subject to data processing agreements and appropriate international transfer safeguards.

4.3 Functionality Cookies

Functionality cookies allow our Website to remember choices you make and provide enhanced, personalised features. For example, they may remember your preferred language, currency, recently viewed products, or wishlist items across sessions. These cookies cannot track your browsing activity on other websites.

These cookies require your consent.

Functionality cookies may be placed by us (first-party) or by third-party service providers who provide specific features on our Website, such as live chat or personalisation engines. The specific providers are identified in our Cookie Declaration.

4.4 Marketing and Advertising Cookies

Marketing cookies are used to deliver advertisements relevant to you and your interests. They may be placed by us or by third-party advertising networks and social media platforms. They track your browsing activity to build a profile of your interests and show you relevant ads on other websites and platforms. They do not store personal information directly but are based on uniquely identifying your browser and device.

These cookies require your consent.

Marketing cookies on our Website are placed by third-party advertising platforms and social media networks. These third parties may combine data collected through our Website with data collected from other websites to build interest profiles and serve targeted advertising. Each third-party provider processes data under their own privacy policy, which applies to their independent data processing. The specific advertising providers whose cookies are active on our Website are identified in our Cookie Declaration.

4.5 A/B Testing and Optimisation Cookies

We may use website testing and optimisation tools to improve the design, content, and user experience of our Website. These tools use cookies to show different versions of pages to different visitors and measure which version performs better. They may also use session recording and heatmap technologies to help us understand how visitors interact with our pages.

These cookies require your consent.

The specific optimisation tools we use are identified in our Cookie Declaration.

4.6 Affiliate and Referral Tracking Cookies

Where customers reach our Website through affiliate partners, referral links, or partnership programmes, we use cookies to record which partner or source directed the visit. This allows us to correctly attribute sales and calculate commissions for our partners. These cookies do not identify you personally but do record that you arrived via a specific referral source.

These cookies require your consent.

4.7 Social Media Cookies

Social media cookies may be placed by social media platforms whose sharing, follow, or embedded content features appear on our Website, or when you use social login functionality. These platforms may use this information to target advertising to you on their own platforms. Each social media platform processes data under its own privacy policy.

These cookies require your consent.

The specific social media providers whose cookies may be active on our Website are identified in our Cookie Declaration.

4.8 Tag Management

We use a tag management system to deploy and manage the various tracking scripts, pixels, and tags on our Website. The tag management system itself does not collect personal data — it acts as a container that controls which other tags are activated based on your consent choices. It honours the consent signals communicated through our cookie banner in real time, ensuring that no non-essential tags fire without your consent.

5. Cookie Duration

Cookies can be classified by how long they remain on your device:

• Session cookies — These are temporary and are automatically deleted when you close your browser. They are used to maintain your session while you navigate our Website
• Persistent cookies — These remain on your device for a set period after your browsing session ends (the duration varies by cookie and is set out in the tables above). They are used to remember your preferences and recognise you when you return

6. First-Party and Third-Party Cookies

• First-party cookies are set directly by us (johnnygrape.com) and are used to enable core functionality and improve your experience on our Website
• Third-party cookies are set by external organisations, such as Google or Meta, through components embedded in our Website (such as analytics scripts, advertising tags, or social media buttons). These third parties have their own cookie policies and their data processing is subject to their own privacy notices

Where third-party services place cookies on your device through our Website, we have assessed them as part of our consent management process. However, we are not responsible for the content of third-party privacy policies. We encourage you to review the privacy policies of any third-party services we use.

7. Retargeting and Remarketing

When you visit our Website, certain cookies and tracking pixels record that visit. This means that after you leave our Website, you may see advertisements for Johnny Grape products on other websites, apps, and social media platforms you visit. This is known as retargeting or remarketing.

Retargeting works by using the marketing cookies and pixels described in Section 4.4 above. For example:

• If you view a product on our Website but do not purchase it, you may later see an ad for that product on social media or on other websites you visit
• If you add items to your basket but do not complete checkout, we may serve you a reminder advertisement on third-party platforms
• We may create custom audiences on advertising platforms by matching your browser or device data with data held by those platforms

We may also use your data to build lookalike audiences — advertising platforms can use aggregated, anonymised characteristics of our existing customers to find and target new potential customers with similar profiles. This does not involve sharing your personal contact details with any advertising platform.

All retargeting is subject to your cookie consent. If you decline marketing cookies, retargeting cookies will not be placed and you will not see targeted Johnny Grape advertisements based on your Website visit.

8. Email Tracking Pixels

Our marketing emails may contain invisible tracking pixels — small, single-pixel images that are loaded when you open an email. These pixels allow us to:

• Detect whether an email has been opened
• Record the date, time, and approximate location of the open
• Track which links within the email are clicked

This data is used to measure the performance of our email campaigns and to improve the relevance and timing of our communications to you.

Email tracking is subject to your consent to receive marketing communications from us. If you have not consented to marketing emails, we will not send you emails containing tracking pixels. You can opt out of our marketing emails at any time by clicking the unsubscribe link in any email we send, which will also stop email tracking.

If you prefer not to allow email tracking even if you receive our emails, you can disable automatic image loading in your email client settings, which will prevent tracking pixels from loading.

9. Server-Side Tracking

In addition to browser-based cookie tracking, we may use server-side tracking techniques whereby event data is sent directly from our servers to advertising and analytics platforms, bypassing the browser entirely. This means server-side tracking is not affected by browser cookie blockers or ad blockers.

Server-side tracking is used only for purposes that you have consented to through our cookie banner — your consent choices apply equally to both browser-side and server-side data collection. If you decline marketing or analytics cookies, we will not transmit your data to the relevant platforms via server-side methods either.

10. Cross-Device Tracking

Where you are signed in to your Johnny Grape account on multiple devices, or where advertising platforms are able to identify you across devices (for example through your Google or Meta account), your activity may be linked across those devices. This allows us and our advertising partners to provide a consistent experience and to show you relevant advertising regardless of which device you are using.

Cross-device tracking for advertising purposes is subject to your consent to marketing cookies. Cross-device recognition for account functionality (for example, keeping you logged in on a device you use regularly) is strictly necessary and does not require separate consent.

11. Consent Mode Integration

We have implemented a consent mode framework on our Website that allows our analytics and advertising services to adjust their data collection behaviour based on the consent choices you make through our cookie banner. Specifically:

• If you consent to analytics cookies, our analytics services will collect full measurement data
• If you consent to marketing cookies, our advertising services will be able to serve personalised ads and measure conversions
• If you decline analytics or marketing cookies, these services will operate in a privacy-preserving mode — where available, conversion data may be modelled without identifying you individually

This implementation ensures that our third-party services respect your consent choices in real time.

12. Consent Management Platform

We manage cookie consent on our Website using a Consent Management Platform (CMP). This is the tool that powers the cookie banner you see when you first visit our Website, and the “Cookie Settings” panel where you can manage your preferences at any time.

The CMP records your consent choices, links them to a session identifier, and ensures that cookies are only placed once valid consent has been obtained. It also communicates your choices in real time to third-party services via frameworks such as Google Consent Mode v2 and the IAB Transparency and Consent Framework (TCF).

13. What Happens If You Reject Cookies

You can choose to accept or decline different categories of cookies. The following table explains what will happen in each case:

Declining non-essential cookies will not prevent you from browsing the Website or making a purchase, but it may limit certain personalisation features.

14. Do Not Track

Some browsers include a Do Not Track (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. There is currently no agreed EU or international standard for how websites should respond to DNT signals, and we do not currently alter our data collection practices in response to DNT signals.

Your cookie consent choices made through our consent banner remain the most effective and legally recognised way to control tracking on our Website.

15. How to Manage Your Cookie Preferences

15.1 Our Cookie Consent Banner

When you first visit our Website, you will be presented with a cookie consent banner that allows you to:

• Accept all cookies — consent to all categories of cookies
• Reject all non-essential cookies — decline all cookies except strictly necessary ones
• Manage preferences — choose which specific categories of cookies you consent to

You may update your cookie preferences at any time by clicking the “Cookie Settings” link in the footer of our Website. Withdrawing your consent will not affect the lawfulness of any processing carried out before withdrawal.

15.2 Browser Settings

You can also control and delete cookies through your browser settings. Most browsers allow you to:

• View the cookies that have been set and delete them individually
• Block all cookies or only third-party cookies
• Set your browser to notify you when a cookie is about to be placed

Please note that if you disable all cookies through your browser settings, some features of our Website may not function correctly, including the shopping basket, login, and checkout. Restricting cookies may also prevent you from saving your preferences between visits.

Guidance on managing cookies in common browsers:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data

15.3 Third-Party Opt-Out Tools

For marketing and advertising cookies placed by third-party providers, you may be able to opt out directly through those providers’ own privacy settings. Links to the opt-out tools for the specific providers we work with are available in our Cookie Declaration.

You can also use the following industry-wide opt-out tools to limit interest-based advertising from multiple providers simultaneously:

• Your Online Choices (EU): youronlinechoices.eu — opt out of interest-based advertising from members of the European Interactive Digital Advertising Alliance (EDAA)
• Digital Advertising Alliance: optout.aboutads.info

Please note that opting out of advertising cookies does not mean you will stop seeing advertisements — you will still see ads, but they will be less targeted to your interests.

16. Consent Records

In accordance with the GDPR and applicable guidance, we maintain records of cookie consent obtained through our Website. These records include:

• The date and time consent was given or withdrawn
• The version of the cookie policy and consent banner presented at the time
• The specific categories of cookies consented to or declined
• A technical identifier linking the consent record to the session

These records are retained for 12 months from the date of consent and are available to the CNPD upon request.

17. Cookies and Children

Our Website is not intended for use by persons under the age of 18. We do not knowingly place cookies on the devices of persons under 18. If you are under 18, please do not use our Website.

18. Updates to This Cookie Policy

We may update this Cookie Policy from time to time as our use of cookies changes, or as applicable law and regulatory guidance evolves. Any changes will be posted on this page with an updated “Last updated” date.

We commit to reviewing this Cookie Policy at least once every 12 months, or sooner if we introduce new tracking technologies, add new third-party services, or if relevant regulatory guidance changes. Where we make material changes or introduce new cookie categories, we will re-present our consent banner to existing visitors and request fresh consent where required.

19. Contact Us

If you have any questions about our use of cookies or this Cookie Policy, please contact us:

For questions specifically about your data protection rights in relation to cookie-based data processing, please also refer to our Privacy Policy and Section 15 of that policy (Your Rights Under GDPR).