Cookies at JUCE

This notice explains the cookies and similar storage JUCE uses on juce.co.za, and how the Protection of Personal Information Act, 2013 applies to them. It is written to be read, not to be survived.

The short version

• Some cookies are needed for the site to work at all - your cart, your sign-in, checkout, and remembering your cookie choice. Those are set whatever you decide, because without them nothing here works.
• Everything else is optional and off until you say yes. That is the banner you saw on your first visit.
• We do not sell your information, ever, to anybody.
• We do advertise on Meta (Facebook and Instagram), Google and TikTok, and we measure whether those adverts work. That measurement is the one thing on this site that sends anything about you to another company, it is the "Advertising" switch in the cookie panel, and turning it off stops it.
• If you say no, we still count what the site is doing - how many people opened a product page, how many added something - and none of that counting knows who you are. It is explained in full below.
• You can change your answer at any time, and withdrawing also deletes what your browser has already recorded.

Change my cookie choices

Who is asking

JUCE is the trading name of Juce Fragrances (Pty) Ltd, a company registered in South Africa. We are the responsible party for everything described on this page: we decide why and how this information is used, and we are the ones accountable for it.

Questions, access requests, corrections and complaints go to our Information Officer at support@juce.co.za. We answer within 30 days and usually the same week.

If our answer does not satisfy you, you may take it to the Regulator directly. You do not need our permission or our involvement to do that, and their details are here rather than a click away on purpose.

Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
enquiries@inforegulator.org.za · 010 023 5200 · inforegulator.org.za

What allows us to do this

POPIA allows personal information to be processed only where one of the grounds in s11 applies. Two of them apply here, and which one it is depends entirely on the category:

• Essential - necessary to carry out the sale you came here for, and to protect the site and your account from fraud and abuse (s11(1)(b) and s11(1)(f)). These do not rest on consent, which is why there is no switch that turns them off.
• Everything else - your consent, and nothing but your consent (s11(1)(a)). POPIA only counts a consent that is voluntary, specific and informed, so it is off until you say yes, it is asked for one category at a time, and this page is what "informed" is supposed to mean.

What is set, and by whom

Three categories, and a fourth that does not apply to us today. The names below are the real ones - open your browser's storage inspector on this page and you will find these and nothing else. That sentence was false until 2026-08-26: six advertising cookies were on your device and not on this page. They are listed now, in their own table.

Essential - always on

These are set whether or not you agree to anything, because the site cannot function without them. POPIA allows this: they are necessary to carry out the sale you came here for, and to protect our systems.

Name	Set by	What it does	Kept for
juce_consent	JUCE	Your answer to the cookie banner. Without it we would ask you again on every page.	1 year
juce:consent:v1 (local storage)	JUCE	The same answer, kept a second time in case the cookie is cleared on its own. It also holds the wording you were shown when you answered, so we can tell whether you have seen the current version of this page.	Until you clear it
cart, cart_ts, cart_sig	Shopify	Your cart, and proof it has not been tampered with.	2 weeks
_secure_session_id, secure_customer_sig	Shopify	Keeps you signed in and keeps checkout secure.	Session to 1 year
_tracking_consent	Shopify	Carries your answer above into checkout, which runs on Shopify's own pages where our script cannot reach.	1 year
localization, keep_alive	Shopify	Country and currency, and keeping a slow connection alive through checkout.	Up to 1 year

Things the site remembers on your device

These are not cookies. They are notes the site leaves in your own browser so a page can pick up where you left it, and clearing your browser data removes all of them. The last column is the one that matters: it says, for each one, whether anything on our side ever gets to see it.

Name	What it holds	Kept for	Does it leave your browser?
juce:recent:v1	The scents you have looked at recently, so the site can show them again.	Until you clear it	Only if you said yes to Remembering you. Then it travels with a message you send Jennie, so she can answer about the bottles you were just looking at. Say no and it stays here.
juce:queries:v1	Your recent searches, offered back to you in the search box.	Until you clear it	Never
juce:cf-view:v1, juce:jennie:open:v1	How you last left a screen: the layout you chose on a collection, whether the chat panel was open.	Until you clear it, or until this tab closes	Never
juce:track:v1	The parcels you have tracked, and the last answer the courier gave about each.	Until you clear it	Not on its own. Nothing is looked up until you press a tracking number, and then that number goes to the courier who is carrying the parcel, not to us.
juce:rma:last, juce:rma:token (session storage)	The return you have just started: its reference, the email you gave, and the pass that lets this tab keep talking about that one return.	Until this tab closes, at most 48 hours	Yes, and they have to. Reopening the page asks our returns system for the state of that return, which is the only way it can show you where it has got to. It is your own return, and it was on our side the moment you submitted it.
juce:search-index:v11, juce:bag-snubbed, juce-shot-fit-2 (session storage)	Working state for this tab: the catalogue it has already downloaded, a suggestion you dismissed, an image measurement.	Until this tab closes	Never

How the site is used - optional

Our own measurement, which we call LOOM. It records which pages and scents get looked at, what people search for, and where the site trips people up, so we know what to fix. It runs on our own server and our own database. Nothing here is shared with anyone.

Name	Set by	What it does	Kept for
juce_vid	JUCE	A random identifier for this browser. It says nothing about you - it is a number we generate, not anything you told us - and it is only ever created once you have said yes.	400 days
juce:loom:v1, juce:loom:q, juce:loom:ctx (local storage)	JUCE	The same identifier, which visit you are on and how you arrived; what has not been sent to us yet; and a marker so your screen size is described once rather than on every page.	Until you clear it, or until you withdraw
_shopify_y, _shopify_s	Shopify	Shopify's own visit counters. We read _shopify_y so a checkout can be recognised as the same visit that browsed.	Up to 1 year

These records are kept only for as long as they help us run and improve the site, and are then deleted. You can ask us to delete yours at any time, as described below.

Remembering you - optional

This is the one that connects the above to a person rather than to a browser: your scent picks and past orders, so recommendations fit you and so that Jennie knows you instead of starting from nothing every visit. With it off, measurement still works and simply has nobody's name on it.

With it off, the two below are not written at all, and the recently-viewed list in the table above stops travelling with your messages to Jennie. Jennie still works and still holds the conversation you are having with her right now - that lives in your tab and goes when you close it - she still sees the page you are standing on, the scent you are looking at and what is in your cart, so nearly every question still has its answer. She simply will not know you next time, and will not be able to refer back to the bottles you looked at earlier.

Name	Set by	What it does	Kept for
juce_jid	JUCE	Recognises you across a chat conversation and between visits.	1 year
juce:jennie:v1 (local storage)	JUCE	Your conversation with Jennie, so it does not restart every time.	Until you clear it

Advertising - optional

Set by the advertising tools described further down, and only while the Advertising switch is on. These are the only cookies on this site set by another company.

Name	Set by	What it is for	Kept for
_fbp, _fbc	Meta	Identifies this browser to Meta so an order can be matched to the Facebook or Instagram advert that led to it. _fbc exists only if you arrived by clicking one.	90 days
_ga, _ga_YNVZNQGSWE, _ga_GTQ58XQWV3	Google	Google Analytics visitor and session counters. _ga_YNVZNQGSWE belongs to the Analytics property; _ga_GTQ58XQWV3 belongs to the Google Merchant Center conversion tag, which reports orders to Merchant Center so JUCE's Google listings can be measured.	Up to 2 years
_gcl_au	Google	The Google Ads conversion linker, which is how a Google advert gets credited with an order.	90 days
_ttp, ttcsid, ttcsid_…	TikTok	The same job for TikTok adverts.	Up to 13 months
Fera.Api.ServerNum	Fera	Not advertising - it is the reviews app remembering which of its servers answered you. Listed here because it is the one other name a browser inspector will show that is not ours.	Session

Advertising

We do run advertising, and this is the category it belongs to. Until 2026-08-26 this section said we ran none, and it was wrong: the tools below are installed as Shopify apps rather than as code in our website, so they did not appear anywhere in the site's own source. They were still setting cookies on your device. The page is corrected rather than quietly edited, because a privacy notice that has been wrong should say so.

What runs, and what each one is for:

• Meta pixel (Facebook and Instagram) - tells Meta which of our adverts led to a visit or an order. Cookies: _fbp, and _fbc if you arrived from an advert.
• Google Analytics and Google Ads - how the site is found and used, and which Google adverts led to an order. Cookies: _ga, _ga_YNVZNQGSWE, _ga_GTQ58XQWV3, _gcl_au.
• TikTok pixel - the same question for TikTok adverts. Cookies: _ttp, ttcsid, ttcsid_….

All three receive what you did on this site - pages viewed, things added to a cart, orders placed - and use it in both directions: to tell us which advert paid for itself, and to decide which of our adverts to show you on their own platform later, matched to what you looked at here rather than picked at random. That second half is what people mean by retargeting, and it is the part this switch turns off. None of them is paid for your data and none of them is a data broker; we buy advertising from them. Switch Advertising off in the cookie panel and none of them hears about you from us.

We also send Meta and Google a record of what was bought from our own server rather than from your browser, so that an order is not miscounted when a tracker is blocked. What travels with it is the email address and phone number given at checkout, converted into an irreversible code (a SHA-256 hash) that those companies can compare against their own records and cannot read back, together with the same browser identifiers their own cookies already carry. It happens only while the Advertising switch is on, only for a browser that answered yes here, and switching it off stops it. Until September 2026 this list also named Triple Whale, an attribution service; it has been removed from the site and sets nothing.

Is saying no going to break anything

No. Saying "Essential only" leaves the site working exactly as it does now: you can browse, search, use the scent finder, fill a cart and check out. Recommendations start from scratch each time, and Jennie will not remember you between visits. There is no price difference, no feature held back, and nothing hidden behind agreeing.

What we still count if you say no

One thing, and it is worth being exact about it rather than leaving you to assume either way. We keep counting how the SITE is doing: that a product page was opened today, that something was added to a cart, that a search was run. It is how we know what to make more of and what is broken, and a site that cannot see that is a site that gets worse.

What makes that different from tracking you is not a promise, it is what the message is capable of carrying. When you have said no, the count that leaves your browser contains a word for the kind of page, the name of the scent if there was one, and a number. That is the whole message. It has:

• no identifier of any kind - not the one above, not a new one, not one worked out from your device. Your browser is told not to send its cookies with it, and nothing that comes back is kept.
• nothing about your device: no screen size, no browser name, no language, no time zone, no location.
• no address, no page address, no search text, no referrer, and no time of day - only the date.
• nothing written to your device. The tally is held in the page's memory and disappears when you close the tab.

Those counts are added into a daily total on our own server. There is no column in it that a person could be put in, so there is nothing to look you up by, nothing to join it to, and nothing to delete on request - which is also why withdrawing does not remove anything from it. It is the same kind of record as a till roll.

If your browser sends a Do Not Track or Global Privacy Control signal, even this does not run.

Where your information goes

Our own servers, and the small number of providers who run the site for us: Shopify (the site and checkout), Google Cloud (where our server and database live), our courier for deliveries, and our payment provider for payments. Some of them process information outside South Africa, which POPIA s72 permits where the receiving country or the contract gives comparable protection. We do not sell information to anyone. Meta, Google and TikTok are United States companies, so with Advertising switched on, what you did here is processed there under their own agreements with us; switched off, they receive nothing.

What you can ask us for

Under POPIA you may ask what we hold about you (s23), ask us to correct or delete something that is wrong or that we should not have (s24), object to how we use it (s11(3)), and withdraw any consent you gave (s11(2)(b)) - at any time, without giving a reason, and without it costing you anything.

The button at the top of this page withdraws your consent and deletes what this browser has recorded, immediately. For anything wider - every device, your account, your orders - email support@juce.co.za and we will do it. We answer within 30 days and usually the same week.

Withdrawing stops what happens from that moment on. It does not make what we did while the consent stood unlawful, and it does not reach the essential cookies, which never rested on consent in the first place. Nothing about the site changes as a consequence: there is no price difference and no feature held back, then or ever.

How it is kept safe

POPIA s19 asks for reasonable safeguards, and ours are the ordinary ones done properly. Everything described here travels over HTTPS, lives on servers we run rather than being handed around, and is reachable by the few people who need it. The identifiers in the tables above are random numbers we generate rather than anything you told us, so on their own they name nobody. If a breach ever reached your information, s22 obliges us to tell you and the Regulator, and we would.

What we will not do with it

We do not sell your information. Apart from the advertising measurement described above, which you control, we do not give it to advertising networks or data brokers. Nothing here decides anything about you on its own either - a recommendation is a suggestion on a page, not the kind of automated decision with legal consequences that s71 governs, and a person is behind anything that actually affects your order. We do not aim this site at children and do not knowingly collect information about anyone under 18; if you think we have, tell us and it goes.

How your browser's own settings fit in

If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as a no before we ask anything: no banner appears, no optional storage is written, and nothing is sent. You do not have to tell us twice.

If this changes

If we change what we collect or why, the version of this notice changes with it and you will be asked again rather than silently carried over. Wording fixes that do not change what we do will not interrupt you.

Last reviewed: 25 August 2026. See also our privacy policy, terms of service and returns, refunds and exchanges policy.