COOKIE POLICY
COOKIE POLICY
Last updated: January 2026
At CANVAS FOR YOU®, we use cookies and similar technologies to ensure the website functions properly, improve the browsing experience, remember certain preferences, protect website security and, where applicable, collect statistical data or integrate third-party features.
This Cookie Policy explains what cookies are, which types may be used on this website, why they are used, who manages them, how long they may remain active, and how you can accept, reject, configure, or delete them.
Our website address is:
1. Who is responsible for the use of cookies
Controller: CANVAS FOR YOU®
Owner: Ezequiel Ponce
NIF/NIE: Y7090193K
Address: Calle de Amor 77, 28026, Madrid, Spain
Contact email: hello@ canvas-for-you.com
Website: https://canvas-for-you.com
2. What cookies are
Cookies are small files downloaded or stored in a browser, device, or other terminal equipment when someone visits a website.
These technologies can, among other things, recognize a browser, remember preferences, keep a session active, enable technical features, improve security, collect statistical information, or support third-party services.
For purposes of this policy, “cookies” also includes equivalent technologies that store or access information on a device, such as:
• HTTP cookies.
• Browser local storage (localStorage).
• Session storage (sessionStorage).
• Pixels, tags, or similar technologies, where used.
• Technical identifiers associated with a browser or device.
3. Applicable legal framework
The use of cookies and similar technologies is primarily governed by:
• The General Data Protection Regulation.
• Spain’s Organic Law on Personal Data Protection and the Guarantee of Digital Rights.
• Spain’s Law on Information Society Services and Electronic Commerce.
• The Spanish Data Protection Agency’s guidelines and criteria for the use of cookies.
Under applicable law, strictly necessary technical cookies may be used when they are essential to provide a requested service, enable communication between a device and the website, maintain security, manage a session, or support basic features.
Analytics, nontechnical personalization, advertising, behavioral, and tracking cookies generally require clear prior notice and consent.
4. Types of cookies by the entity that manages them
First-party cookies
These are managed by CANVAS FOR YOU® or by the website’s own domain. They may support technical features, security, session management, preferences, forms, comments, or the website’s basic operation.
Third-party cookies
These are managed by entities other than CANVAS FOR YOU®. They may be installed, for example, when the website integrates analytics services, videos, maps, external forms, payment platforms, social networks, communications tools, anti-spam systems, or embedded content.
When a cookie is set by a third party, the information may also be processed under that provider’s privacy and cookie policies.
5. Types of cookies by duration
Session cookies
These cookies are designed to remain active only while you browse the website. They are usually deleted when you close your browser.
Persistent cookies
These cookies remain stored for a set period, which may vary depending on their purpose, technical settings, or provider. Once that period ends, the cookie is deleted or becomes inactive.
Local storage
Some features may use localStorage. This technology stores information in your browser without a predetermined automatic expiration date. You can delete it manually through your browser settings or by clearing the website’s data.
6. Types of cookies by purpose
6.1. Strictly necessary technical cookies
These cookies are needed for the website to function properly and to provide services you expressly request.
They may be used to:
• Allow you to browse the website.
• Manage login sessions.
• Remember technical information during a visit.
• Check whether your browser accepts cookies.
• Maintain website security.
• Prevent spam, fraud, or misuse.
• Support forms, comments, or private areas.
• Manage access for administrators, editors, or registered users.
These cookies may be used without consent when they are strictly necessary for the website to function or to provide a requested service.
6.2. Preference or personalization cookies
These cookies remember information so you can use the website with certain settings, such as a selected language, screen configuration, region, display preferences, or other chosen settings.
When these cookies respond to an express request from you, they may be considered technical. When they are used to build profiles or personalize your experience without an express request, consent may be required.
6.3. Analytics or measurement cookies
These cookies collect aggregated information about website use, including pages visited, browsing time, traffic source, interactions with content, or website performance.
They help us understand how the website is used and improve its operation, structure, and content.
If analytics cookies are used and no legal exemption applies, we will request your consent first.
6.4. Advertising cookies
These cookies help manage advertising space, measure campaigns, or control how often an ad is shown.
Prior consent is required when these cookies are used.
6.5. Behavioral advertising cookies
These cookies may create browsing profiles to show personalized advertising based on browsing habits, interests, or behavior on the website.
Prior consent is required.
6.6. Third-party cookies and embedded content
The website may include content embedded from other sites, such as videos, images, maps, forms, calendars, players, registration platforms, or similar content.
Embedded content may install cookies or similar technologies managed by an external provider. Interacting with that content may allow the provider to collect data, use cookies, add tracking technologies, and monitor interactions—particularly if you have an active account and are logged in to that service.
7. Cookies and technologies used on this website
The list below is based on the website’s known features and the plugins or services identified for CANVAS FOR YOU®.
This list should be reviewed periodically using a cookie scanner or the consent-management tool installed on the website. Cookie names, durations, and ownership may change following updates to WordPress, plugins, external services, or technical settings.
7.1. WordPress technical cookies
The website is built on WordPress or may use WordPress features.
WordPress may set technical cookies needed to manage comments, sessions, logins, screen preferences, and content editing.
Comment-related cookies
• Name: comment_author_[hash]
• Owner: First party / WordPress
• Type: Technical / functional
• Purpose: Remembers the name entered when leaving a comment if the user chooses to save their information for future comments.
• Typical duration: 1 year.
• Legal basis: User-requested preference / technical feature.
• Consent: May be exempt when it responds to an express request to remember that information.
• Name: comment_author_email_[hash]
• Owner: First party / WordPress
• Type: Technical / functional
• Purpose: Remembers the email address entered when leaving a comment if the user chooses to save their information for future comments.
• Typical duration: 1 year.
• Legal basis: User-requested preference / technical feature.
• Consent: May be exempt when it responds to an express request to remember that information.
• Name: comment_author_url_[hash]
• Owner: First party / WordPress
• Type: Technical / functional
• Purpose: Remembers the website entered when leaving a comment if the user chooses to save their information for future comments.
• Typical duration: 1 year.
• Legal basis: User-requested preference / technical feature.
• Consent: May be exempt when it responds to an express request to remember that information.
Login and session cookies
• Name: wordpress_test_cookie
• Owner: First party / WordPress
• Type: Technical
• Purpose: Checks whether the browser accepts cookies.
• Typical duration: Session.
• Legal basis: Technical operation of the website.
• Consent: Exempt.
• Name: wordpress_[hash]
• Owner: First party / WordPress
• Type: Technical
• Purpose: Authenticates registered users or administrators.
• Typical duration: Session or the technical period associated with the login.
• Legal basis: Technical operation and access management.
• Consent: Exempt.
• Name: wordpress_logged_in_[hash]
• Owner: First party / WordPress
• Type: Technical
• Purpose: Identifies whether someone is logged in and keeps the login session active.
• Typical duration: 2 days; up to 2 weeks if “Remember Me” is selected.
• Legal basis: Technical operation and access management.
• Consent: Exempt.
Screen preference and administration cookies
• Name: wp-settings-[UID]
• Owner: First party / WordPress
• Type: Technical / preferences
• Purpose: Stores display and interface settings for the administration area.
• Typical duration: 1 year.
• Legal basis: Technical preference associated with an account or administration.
• Consent: Exempt when needed to retain a requested setting.
• Name: wp-settings-time-[UID]
• Owner: First party / WordPress
• Type: Technical / preferences
• Purpose: Records when display preferences were configured.
• Typical duration: 1 year.
• Legal basis: Technical preference associated with an account or administration.
• Consent: Exempt when needed to retain a requested setting.
Editing or publishing cookies
• Name: wp-saving-post
• Owner: First party / WordPress
• Type: Technical
• Purpose: Stores technical information associated with editing or publishing content.
• Typical duration: 1 day.
• Legal basis: Technical operation of the editor.
• Consent: Exempt.
• Name: wp-postpass_[hash]
• Owner: First party / WordPress
• Type: Technical
• Purpose: Allows access to password-protected content, if available.
• Typical duration: May vary depending on settings.
• Legal basis: Service requested by the user.
• Consent: Exempt when necessary to access the requested content.
7.2. Local storage associated with Joinchat / WhatsApp
The website may use a floating WhatsApp button through Joinchat to make it easier to contact CANVAS FOR YOU® directly.
Joinchat states that it does not use cookies in the strict sense, but instead uses two localStorage variables—joinchat_views and joinchat_hashes—to control when the chat window appears and prevent calls to action that have already been closed or used from being shown again. (Joinchat)
• Name: joinchat_views
• Owner: First party / Joinchat
• Technology: HTML LocalStorage
• Type: Technical / functional
• Purpose: Counts views and controls when the WhatsApp chat window should appear automatically.
• Typical duration: Persistent, until website data is cleared in the browser.
• Personal data: Does not, by itself, contain personal data.
• Legal basis: Technical operation of a contact feature.
• Consent: Exempt when used exclusively for the technical operation of the button.
• Name: joinchat_hashes
• Owner: First party / Joinchat
• Technology: HTML LocalStorage
• Type: Technical / functional
• Purpose: Remembers whether a chat call to action has been closed or used, preventing it from appearing automatically again.
• Typical duration: Persistent, until website data is cleared in the browser.
• Personal data: Does not, by itself, contain personal data.
• Legal basis: Technical operation of a contact feature.
• Consent: Exempt when used exclusively for the technical operation of the button.
When you start a WhatsApp conversation, the communication moves to WhatsApp. WhatsApp may then process data in accordance with its own terms and policies.
7.3. Cookies or technologies associated with comments, Gravatar, and Akismet
If the website allows comments, services associated with WordPress, Gravatar, or Akismet may be involved.
Gravatar
When someone leaves a comment, an anonymized string or hash may be generated from the email address to check whether the person uses Gravatar. If a profile picture is associated with the account and the comment is approved, that image may be displayed publicly alongside the comment.
• Provider: Gravatar / Automattic.
• Purpose: Displays profile pictures associated with comments.
• Type: External service associated with comments.
• Legal basis: Comment management and related features.
• Consent: Depends on the technical configuration and whether the service sets cookies or carries out additional processing.
Akismet
If the website uses Akismet, comments may be reviewed by an automated spam-detection system. Depending on the service settings, the information processed may include the IP address, user-agent string, website URL, referring site, name, username, email address, and comment content.
• Provider: Akismet / Automattic.
• Purpose: Detects spam and protects the integrity of comments.
• Type: Security / anti-spam.
• Legal basis: Legitimate interest in protecting the website against spam, abuse, or fraud.
• Consent: May be exempt when processing is necessary for security, abuse prevention, and technical protection of the website, without prejudice to any notice required under the Privacy Policy.
7.4. Analytics or measurement cookies
The website may use analytics or measurement tools to collect statistical information about website use.
These tools may measure, among other things:
• Number of visits.
• Pages visited.
• Time spent on the website.
• Approximate traffic sources.
• Interactions with content.
• Website performance.
• Devices or browsers used.
If tools such as Google Analytics, Matomo, PixelYourSite, Jetpack Stats, or equivalent services are used, the exact technical details of each installed cookie should be provided here.
Analytics cookies pending technical inventory
• Name: [Enter the exact cookie name]
• Provider: [Enter the provider]
• Type: Analytics / measurement
• Purpose: [Enter the specific purpose]
• Duration: [Enter the actual duration]
• Ownership: First party or third party
• Legal basis: Consent, unless a technical exemption applies under the relevant criteria.
• Consent: Required where applicable.
7.5. Advertising or marketing cookies
The website may use advertising or marketing cookies only if tools have been implemented to measure campaigns, conduct remarketing, personalize ads, or analyze conversions.
These cookies may be associated, for example, with Meta, Google Ads, LinkedIn Ads, YouTube, TikTok, advertising pixels, or other commercial measurement platforms.
If used, they must be activated only after the required consent has been obtained.
Advertising cookies pending technical inventory
• Name: [Enter the exact cookie name]
• Provider: [Enter the provider]
• Type: Advertising / marketing / behavioral advertising
• Purpose: [Enter the specific purpose]
• Duration: [Enter the actual duration]
• Ownership: First party or third party
• Legal basis: Consent.
• Consent: Required.
7.6. Embedded-content cookies
The website may include content embedded from third parties, such as videos, images, maps, forms, calendars, players, registration platforms, or external tools.
These providers may set first-party or third-party cookies when you interact with the content or when it loads on the page.
Depending on the website’s actual configuration, providers may include:
• YouTube or Vimeo, if videos are embedded.
• Google Maps, if maps are embedded.
• Calendly or other booking tools, if calendars are embedded.
• Zoom or other platforms, if forms or content are integrated.
• External forms or automation platforms.
• Payment or registration platforms.
• Social networks or content-sharing services.
These cookies depend on each provider, the settings in place, and the consent given.
8. Legal basis for using cookies
The legal basis depends on the type of cookie or technology used.
Strictly necessary technical cookies
The legal basis is the technical necessity of providing the requested service, enabling electronic communication, operating the website, maintaining security, or supporting basic features.
These cookies may be used without consent when strictly necessary.
Requested preference cookies
The legal basis may be your express request to retain a preference, such as remembering comment details, language, configuration, or display settings.
Nonessential analytics, advertising, behavioral, or third-party cookies
The legal basis is consent. Consent must be given through a clear affirmative action after you have received sufficient information.
9. Managing consent
When the website uses cookies that require consent, a settings panel or banner will allow you to:
• Accept all cookies.
• Reject all nonessential cookies.
• Configure cookies by purpose.
• Save your selection.
• Reopen the settings later to change or withdraw your consent.
Withdrawing consent must be as easy as giving it.
You can change your cookie settings at any time using the following link or button:
[Manage cookie settings]
This button or link must be connected to the consent panel actually used on the website.
10. Cookies exempt from consent
Cookies or technologies may be exempt from consent when they are strictly necessary to:
• Enable communication between a device and the website.
• Provide a service expressly requested by the user.
• Manage login sessions.
• Remember information needed during a session.
• Maintain website security.
• Prevent fraud, spam, or misuse.
• Authenticate registered users.
• Enable essential technical features.
• Remember preferences expressly requested by the user.
This exemption must be interpreted narrowly. Analytics, advertising, behavioral, or tracking cookies require consent when no applicable exemption covers them.
11. How to delete or block cookies in your browser
In addition to the website’s settings panel, you can allow, block, or delete cookies through your browser settings.
The steps vary by browser but are usually available under privacy, security, history, cookies, or site data.
You can manage cookies in the settings for the major browsers:
• Google Chrome: Privacy and security settings, cookies and other site data.
• Safari: Privacy settings and website data management.
• Mozilla Firefox: Privacy and security settings, cookies and site data.
• Microsoft Edge: Cookies and site permissions.
• Opera: Privacy and security settings, cookies and site data.
Blocking certain technical cookies may affect some website features.
Deleting cookies or site data may also end active sessions, erase saved preferences, or reset notices that were previously configured.
12. How to delete local storage
Some features may use browser local storage, such as certain technical variables used by Joinchat.
You can delete local storage through your browser settings using the options to clear site data, history, local storage, or browsing data.
You can also delete it through your browser’s developer tools, although this option is intended for technical users.
Deleting local storage may cause certain windows, preferences, or notices to appear again as if you were visiting for the first time.
13. International transfers associated with third-party cookies
Some external providers that set cookies or use similar technologies may process data outside the European Economic Area.
This may occur, among other cases, when using analytics services, advertising, embedded videos, maps, form platforms, messaging systems, anti-spam services, social networks, or international technology providers.
When these transfers occur, they must use the mechanisms provided for under the General Data Protection Regulation, including adequacy decisions, standard contractual clauses approved by the European Commission, additional safeguards, or other valid legal mechanisms.
For more information about this processing, you should also review the privacy and cookie policies of each external provider.
14. Relationship to the Privacy Policy
The use of cookies may involve the processing of personal data, particularly when cookies allow someone to be identified directly or indirectly, recognize a device, analyze browsing behavior, measure interactions, or link information to third-party services.
General information about how CANVAS FOR YOU® processes personal data is available in the Privacy Policy.
You can view the Privacy Policy at:
[Insert link to Privacy Policy]
15. Updates to this Cookie Policy
CANVAS FOR YOU® may update this Cookie Policy when the cookies in use change, new providers are added, the website’s technical settings change, plugins are updated, new tools are integrated, or laws or regulatory guidance change.
The current version is the one published on this page at any given time, with the date of the latest update.
16. Contact
For questions about this Cookie Policy or the use of cookies and similar technologies on the website, contact CANVAS FOR YOU® at:
Email: hello@ canvas-for-you.com
Mailing address:
CANVAS FOR YOU®
Calle de Amor 77
28026 Madrid, Spain
17. Technical notice to complete before publication
Before publishing this Cookie Policy, verify the actual cookie inventory using the consent-management plugin, a browser, or a technical scanner.
In particular, confirm:
• Whether the website uses Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, YouTube, Vimeo, Calendly, Stripe, PayPal, Mailchimp, Zoom, WooCommerce, LearnPress, Elementor, Contact Form 7, or other plugins that set cookies.
• Whether public comments are enabled.
• Whether the website has a private area or client login.
• Whether the website uses analytics or advertising cookies.
• Whether the banner makes it equally easy to accept, reject, and configure cookies.
• Whether a visible button is available for changing or withdrawing consent after the initial selection.
• Whether the final cookie table matches what the website actually installs.