Legal & Privacy
Cookie Policy
Effective Date: August 4, 2026 | Last Updated: August 4, 2026
This Cookie Policy explains in precise detail what cookies, tracking technologies, and server-side data The Chosen Luxe Group Co. ("we," "us," or "our") collects when you visit thechosenluxegroup.com, how that data is used, how long it is retained, and what rights you have. This Policy supplements our Privacy Policy and Terms of Use.
By continuing to use our website after being presented with our cookie consent notice, you consent to our use of cookies and tracking technologies as described herein. You may withdraw or modify your consent at any time using the methods described in Section 6 below.
1. What Are Cookies?
Cookies are small text files placed on your device (computer, tablet, or mobile phone) by websites you visit. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to website owners. Cookies are not programs and cannot carry viruses or install malware on your device.
In addition to cookies, we and our third-party partners may use other tracking technologies including:
- Pixel tags / web beacons: Tiny invisible images embedded in web pages or emails that signal when a page or email has been opened, and may transmit your IP address and browser information to the tag's owner.
- Local storage: Browser-based storage mechanisms (localStorage, sessionStorage) that allow websites to store data on your device beyond the cookie lifecycle.
- Fingerprinting: Certain analytics and security providers may collect device characteristics (screen resolution, browser version, installed fonts, timezone) to create a probabilistic identifier for fraud prevention and analytics purposes.
- Server-side logs: Our web server automatically records technical data about every request it receives, independent of cookies. See Section 5 for full details.
2. Categories of Cookies We Use
We categorize our cookies into five types based on their purpose:
2.1 Strictly Necessary Cookies
These cookies are essential for our website to function and cannot be switched off. They are set in response to actions you take, such as submitting a form or setting your privacy preferences. You can set your browser to block these cookies, but some parts of the site will not work as a result. These cookies do not store any personally identifiable information beyond what is strictly required for the function they serve.
| Cookie / Identifier | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| __session | thechosenluxegroup.com | Maintains your session state across page requests; required for secure form submissions and contact form functionality. | Session | Necessary |
| XSRF-TOKEN | thechosenluxegroup.com | Cross-site request forgery protection token. Required to secure form submissions against malicious third-party requests. | Session | Necessary |
| cookie_consent | thechosenluxegroup.com | Stores your cookie consent preferences so we do not re-prompt you on every visit. | 1 year | Necessary |
| __cf_bm | Cloudflare | Bot management and DDoS protection. Distinguishes between human visitors and automated bots to protect site security. | 30 minutes | Necessary |
| _cfuvid | Cloudflare | Rate-limiting and abuse prevention. Used by Cloudflare to identify individual clients behind a shared IP address. | Session | Necessary |
2.2 Functional Cookies
These cookies enable enhanced functionality and personalization, such as appointment scheduling and client portal access. They may be set by us or by third-party providers whose services we have integrated into our website. If you disable these cookies, some or all of these services may not function properly.
| Cookie / Identifier | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| __calendly_* | Calendly | Enables the Calendly scheduling widget to function, remember your timezone, and pre-fill your contact details for appointment booking. | Up to 1 year | Functional |
| honeybook_* | HoneyBook | Supports the HoneyBook client portal and project management integration, including session continuity for client onboarding flows. | Up to 1 year | Functional |
| lang | thechosenluxegroup.com | Remembers your language or locale preference. | 1 year | Functional |
2.3 Analytics Cookies
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our website. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our site and will not be able to monitor its performance.
| Cookie / Identifier | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| _ga | Google Analytics | Registers a unique ID used to generate statistical data on how you use the website. Distinguishes unique users. | 2 years | Analytics |
| _ga_* | Google Analytics (GA4) | Used by Google Analytics 4 to persist session state and track page views, events, and user journeys across sessions. | 2 years | Analytics |
| _gid | Google Analytics | Registers a unique ID used to generate statistical data on how you use the website. Expires after 24 hours. | 24 hours | Analytics |
| _gat | Google Analytics | Used to throttle request rate to Google Analytics servers. | 1 minute | Analytics |
| _gcl_au | Google Tag Manager | Used by Google Tag Manager to store and track conversions and ad click data. | 90 days | Analytics |
2.4 Advertising & Targeting Cookies
These cookies may be set through our website by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
| Cookie / Identifier | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| _fbp | Meta (Facebook) | Used by Meta to deliver, measure, and improve the relevance of advertisements across Meta platforms (Facebook, Instagram). | 90 days | Advertising |
| _fbc | Meta (Facebook) | Stores the last Facebook click ID to attribute conversions to Facebook ad campaigns. | 90 days | Advertising |
| fr | Meta (Facebook) | Used by Facebook to deliver, measure, and improve the relevance of advertisements. | 90 days | Advertising |
| IDE | Google DoubleClick | Used by Google DoubleClick to register and report user actions after viewing or clicking an advertisement. | 1 year | Advertising |
| li_fat_id | LinkedIn member indirect identifier for conversion tracking, retargeting, and analytics. | 30 days | Advertising |
2.5 Preference Cookies
These cookies remember choices you make (such as your language preference, cookie consent decision, or display settings) to provide a more personalized experience. Disabling these cookies means your preferences will not be saved between visits.
3. Third-Party Cookies & Integrations
Our website integrates with the following third-party services that may set their own cookies and collect data independently under their own privacy policies. We do not control these third-party cookies and are not responsible for their content or practices. We encourage you to review each provider's privacy policy:
- Google Analytics / Google Tag Manager — Google Privacy Policy
- Meta (Facebook / Instagram) — Meta Data Policy
- LinkedIn — LinkedIn Privacy Policy
- Calendly — Calendly Privacy Policy
- HoneyBook — HoneyBook Privacy Policy
- Cloudflare — Cloudflare Privacy Policy
- GoDaddy (Hosting Infrastructure) — GoDaddy Privacy Policy
- reCAPTCHA (Google) — If reCAPTCHA is enabled on any form, it processes IP address, browser data, and behavioral signals to distinguish human users from bots. Governed by Google's Privacy Policy. reCAPTCHA is not currently active on this site but may be enabled in the future, at which point this disclosure will apply.
4. Cookie Retention Periods
Cookies are retained for the durations specified in the tables above. Session cookies are deleted when you close your browser. Persistent cookies remain on your device until they expire or you delete them. We periodically review our cookie inventory and update retention periods as our services evolve. The "Last Updated" date at the top of this Policy reflects the most recent review.
5. Server-Side & Host Data Collection
Independent of cookies, our web hosting infrastructure and server-side systems collect and retain the following categories of data. This data collection occurs automatically as a technical necessity of operating a web server and cannot be disabled by cookie preferences:
Web Server Logs
Our hosting infrastructure (GoDaddy / Cloudflare) automatically logs every HTTP request to our server. These logs include your IP address, browser user-agent string, referring URL, requested URL path, HTTP status code, and timestamp. Logs are retained for up to 90 days for security monitoring, abuse prevention, and performance diagnostics.
Form Submission Data
When you submit our contact form, the data you enter (name, email, phone, service interest, message) is transmitted over TLS-encrypted HTTPS to our server and stored in our GoDaddy Airo Inbox system. This data is retained for as long as necessary to respond to your inquiry and fulfill any resulting engagement, or as required by law.
Appointment & Scheduling Data
If you book an appointment via Calendly, your scheduling data (name, email, selected time, notes) is processed and stored by Calendly, Inc. under their own Privacy Policy. We receive a copy of this data via Calendly's API and may store it in our CRM (HoneyBook) for client management purposes.
CRM & Client Data (HoneyBook)
Client information collected during the engagement process — including contact details, project scope, contracts, invoices, and communications — is stored in HoneyBook, Inc.'s platform. HoneyBook processes this data as a service provider under our direction and their own data processing terms.
Payment Processing Data
Payment transactions are processed by third-party payment processors (which may include Stripe, Square, or HoneyBook Payments). We do not store full payment card numbers on our servers. We may retain transaction records (amount, date, last four digits, transaction ID) for accounting, tax compliance, and dispute resolution purposes.
Email Communications
Emails sent to or from our domain are processed through our email service provider. Email content and metadata may be stored on our email provider's servers and on our internal systems for business records, client communication history, and legal compliance purposes.
Analytics Data
Aggregated and pseudonymized analytics data collected via Google Analytics is processed and stored on Google's servers in accordance with Google's data processing terms. We access this data through the Google Analytics dashboard and may export reports for internal business analysis.
AI Processing Data
If you interact with any AI-assisted features on our website (including AI-powered chat, content generation, or automated responses), your input data may be processed by third-party AI providers (including but not limited to OpenAI, Google, or Anthropic) under their respective terms of service and privacy policies. See our AI Disclosure page for full details.
Backup & Disaster Recovery
Our hosting provider maintains automated backups of server data for disaster recovery purposes. Backup retention periods vary by provider but typically range from 7 to 30 days. Backups may contain any data stored on our servers at the time of backup.
Security & Intrusion Detection
Our server infrastructure employs security monitoring tools that may log and analyze traffic patterns, authentication attempts, and anomalous behavior for the purpose of detecting and preventing unauthorized access, cyberattacks, and data breaches.
Data Residency: Our primary web hosting infrastructure is located in the United States. Data processed by third-party providers (Google, Meta, Cloudflare, Calendly, HoneyBook) may be transferred to and stored in servers located outside the United States, including in the European Union and other jurisdictions. By using our website, you consent to such international data transfers.
6. Your Cookie Choices & Controls
You have several options for controlling cookies:
- Cookie Consent Banner: When you first visit our website, you will be presented with a cookie consent notice. You may accept all cookies or reject non-essential cookies at that time. To revisit your consent decision, clear your browser cookies and reload the page to trigger the consent notice again, or contact us at [email protected] to request that your consent record be reset.
- Browser Settings: Most web browsers allow you to refuse or delete cookies through their settings. Note that disabling cookies may affect the functionality of our website. For instructions, visit your browser's help documentation or allaboutcookies.org.
- Google Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from collecting your data.
- Advertising Opt-Out: Visit the Network Advertising Initiative or Digital Advertising Alliance opt-out pages to limit interest-based advertising.
- Do Not Track: Some browsers transmit a "Do Not Track" signal. Our website does not currently respond to Do Not Track signals, as there is no industry-wide standard for how such signals should be interpreted.
Important: Opting out of cookies does not prevent server-side data collection (Section 5), which is a technical necessity of operating a web server and cannot be disabled through cookie preferences.
7. Cybersecurity & Data Breach Limitation of Liability
Despite implementing commercially reasonable security measures — including TLS encryption, Cloudflare DDoS protection, access controls, and regular security reviews — no method of data transmission or storage is 100% secure.
Cookie-related data and server-side logs are subject to the same cybersecurity and data breach liability limitations set forth in our Master Disclaimers (§8 and §6), which are incorporated herein by reference. In the event of a data breach affecting your personal information, we will notify you as required by applicable state and federal law, including the Georgia Personal Identity Protection Act (O.C.G.A. § 10-1-910 et seq.).
8. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated Policy on this page with a revised effective date. We encourage you to review this Policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated Policy.
9. Contact Us
If you have questions about this Cookie Policy or our data practices, please contact us: