Legal
Cookie Policy
Last updated: January 7, 2026
This Cookie Policy explains how HAELZA ("we," "our," or "us") uses cookies and similar tracking technologies when you visit our website haelza.com. This policy should be read together with our Privacy Policy.
1. What Are Cookies?
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website owners useful information about how their site is being used.
Cookies can be "persistent" (remaining on your device until deleted or expired) or "session" (deleted when you close your browser).
2. Types of Cookies We Use
Essential Cookies
RequiredThese cookies are strictly necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility.
Examples:
- Session management
- Shopping cart functionality
- Authentication
- Security features
Functional Cookies
These cookies enable personalized features and remember your preferences to enhance your browsing experience.
Examples:
- Language preferences
- Region settings
- Recently viewed products
- User interface customization
Analytics Cookies
These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.
Examples:
- Page views and navigation patterns
- Time spent on pages
- Traffic sources
- User demographics
Marketing Cookies
These cookies are used to track visitors across websites to display relevant advertisements based on your interests.
Examples:
- Targeted advertising
- Social media sharing
- Campaign effectiveness
- Retargeting
3. Specific Cookies We Use
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| haelza_session | Stores your session information for authentication and cart functionality | Session | Essential |
| XSRF-TOKEN | Security token to prevent cross-site request forgery attacks | Session | Essential |
| cookie_consent | Stores your cookie consent preferences | 1 year | Essential |
| locale | Remembers your preferred language setting | 30 days | Functional |
| device_id | Identifies your device for cart and wishlist synchronization | 1 year | Functional |
| _ga | Google Analytics - Distinguishes unique users | 2 years | Analytics |
| _gid | Google Analytics - Stores daily unique visitor information | 24 hours | Analytics |
4. Third-Party Cookies
In addition to our own cookies, we may also use various third-party cookies to report usage statistics, deliver advertisements, and provide other services. These third parties include:
- Google Analytics: For website analytics and usage statistics
- Google reCAPTCHA: For security and spam prevention
- Midtrans: For secure payment processing
- Social Media Platforms: For social sharing features (Instagram, Facebook, Twitter)
5. Managing Cookies
You have several options for managing cookies:
5.1 Cookie Consent Banner
When you first visit our website, you will see a cookie consent banner that allows you to accept all cookies, accept only essential cookies, or customize your preferences.
5.2 Browser Settings
Most web browsers allow you to control cookies through their settings. You can:
- View cookies stored on your device
- Delete all or specific cookies
- Block all or third-party cookies
- Set preferences for certain websites
Please note that blocking certain cookies may impact your experience on our website and limit the functionality available to you.
5.3 Browser-Specific Instructions
- Google Chrome: Settings → Privacy and Security → Cookies
- Mozilla Firefox: Options → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Microsoft Edge: Settings → Cookies and Site Permissions
6. Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Currently, there is no industry-wide standard for handling DNT signals, and our website does not currently respond to DNT signals. However, you can control tracking through cookie preferences as described above.
7. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our practices. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.
8. Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact us:
9. Legal Basis for Processing
Under Indonesia's Personal Data Protection Law (UU PDP No. 27/2022), we process your personal data through cookies based on the following legal grounds:
- Your explicit consent provided through our cookie consent banner when you first visit our website
- Legitimate interests for essential website functionality (e.g., security, session management)
- Performance of our service agreement when you make a purchase or create an account
10. Your Rights Under UU PDP
As a data subject under UU PDP, you have the following rights regarding personal data collected through cookies:
- Right to Access: Know what cookies are used and what personal data is collected
- Right to Withdraw Consent: Withdraw your cookie consent at any time through our cookie settings or by clearing your browser cookies
- Right to Deletion: Request deletion of personal data collected via cookies
- Right to Correction: Request correction of inaccurate personal data
- Right to Object: Object to processing based on legitimate interests
- Right to Portability: Obtain your personal data in a structured, commonly used format
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 3x24 hours as required by UU PDP.
11. Data Retention
We retain personal data collected through cookies only for as long as necessary to fulfill the purposes described in this policy:
- Session Cookies: Automatically deleted when you close your browser
- Persistent Cookies: Retained for the durations specified in Section 3 (ranging from 24 hours to 2 years depending on the cookie type)
You may request deletion of your personal data at any time by contacting us or by clearing cookies through your browser settings.
12. Cross-Border Data Transfer
Some cookies, particularly those from third-party services, may transfer personal data to servers located outside Indonesia. We ensure adequate protection of your data through:
- Ensuring third-party providers maintain equivalent data protection standards
- Standard contractual clauses with international service providers
- Obtaining your explicit consent through our cookie consent banner before enabling non-essential third-party cookies
Third-party services that may transfer data internationally include Google Analytics (USA), payment processors, and social media platforms.
13. UU PDP Compliance Statement
HAELZA is committed to full compliance with UU PDP No. 27/2022 (Indonesia's Personal Data Protection Law). We recognize that non-compliance may result in:
- Administrative Sanctions: Including warning letters, suspension of data processing activities, and administrative fines of up to 2% of annual revenue
- Criminal Penalties: For severe violations, including imprisonment and fines up to IDR 6 billion
We take data protection seriously and continuously review our practices to ensure compliance with Indonesian law. If you believe we have violated your data protection rights, you may file a complaint with us or with the relevant Indonesian authorities.
Related Policies