Cookie Policy
Last updated: 23 September 2026
The site herbelin.com is published by MH DIFFUSION SARL, whose contact details can be found in the legal notices. This policy describes the cookies and trackers used on the site, their purpose, who deploys them, their retention period, and how you can exercise your choice at any time. It complements our privacy policy. In case of divergence between the French version and a translation, the French version prevails.
1. What is a cookie?
A cookie is a small file placed on your device when you visit a website. It allows, for example, your shopping cart, language, or consent preferences to be remembered. Some cookies are placed by Herbelin, others by service providers operating on the site. We use the term "cookie" here to refer to all trackers, including information stored in your browser's local storage.
2. Your choice
Upon your first visit, a window presents three options: Accept all cookies, Continue without accepting, which constitutes a refusal of all non-essential cookies, or Preferences, to select cookies category by category. Declining is as simple as accepting and does not affect site access or the ability to place an order.
Your choice is stored for six months, after which the window will be presented to you again. You may modify it at any time by clicking on the “Cookies” link located at the bottom of each page of the site. Withdrawing your consent terminates the deployment and reading of the relevant cookies; it does not affect processing carried out prior to this withdrawal.
The consent window is provided by Pandectes GDPR Compliance, which records your choice in a cookie deposited on herbelin.com.
3. Cookies used on the site
3.1 Cookies essential for site functionality
These cookies are essential for browsing, building a shopping cart, making payments, and remembering your consent choice. They fall under the exemption provided by Article 82 of the French Data Protection Act (Loi Informatique et Libertés): they are strictly necessary for the service you request. Therefore, they do not require your agreement and cannot be deactivated from the consent window. The corresponding data is processed for the execution of your order and under our legitimate interest in providing a functional and secure site.
| Name | Deployed by | Purpose | Duration |
|---|---|---|---|
| _shopify_essential and, depending on your browsing, cart, cart_sig, secure_customer_sig, keep_alive | Shopify | Security, session, cart, and checkout; cart and account cookies appear only if you add an item or log in | From session to 1 year |
| location | Shopify | Chosen country and language | 1 year |
| cart_currency | Shopify | Display currency | 14 days |
| _shop_app_essential | Shopify (Shop Pay) | Shop Pay accelerated checkout functionality | 1 year |
| _pandects_gdpr | Pandectes | Remembering your consent choices | 6 months |
3.2 Audience measurement cookies
These cookies allow us to count visits, understand pages viewed, and track the journey to improve the site. They are only placed if you accept them.
| Name | Deployed by | Purpose | Duration |
|---|---|---|---|
| _shopify_y, _shopify_s, _shopify_analytics, shopify_client_id | Shopify | Shop statistics (visits, cart, orders) | From session to 1 year |
| _ga, _ga_9W6YBEHKXF, FPID, FPLC | Google Analytics 4, via our measurement server (a server we control, hosted by Addingwell, which relays measurements to our providers based on your consent) | Traffic and journey statistics | From 1 day to 13 months |
| _clck, _clsk | Microsoft Clarity, on herbelin.com | Journey analysis, heatmaps, and session recordings; form entries are masked | From 1 day to 1 year |
| MUID, SM, MR, ANONCHK, SRM_B | Microsoft, placed by Clarity on the clarity.ms and bing.com domains | Microsoft browser identifier, also used by Microsoft for its own purposes, including advertising | From session to 13 months |
If you refuse, none of these cookies will be placed. Two clarifications. Even if you refuse, a cookie-less measurement is transmitted to Google: nothing is read or written to your device, but technical data (IP address, browser, page viewed) is transmitted through Google, which only uses it to produce aggregated statistics; this processing is based on our legitimate interest in measuring site audience, and you may object by writing to us at the address indicated in point 7. Microsoft Clarity is loaded upon page opening; until you accept, it places no cookies and writes no identifiers to your device, and its cookies are only placed after your acceptance.
3.3 Personalization and Advertising Cookies
These cookies allow us to measure the effectiveness of our campaigns, present you with creations and advertisements related to your visits on other sites and networks, and tailor our communications if you are subscribed to our newsletter. They are placed only if you accept them.
| Name | Deployed by | Purpose | Duration |
|---|---|---|---|
| _fbp | Herbelin, via our measurement server, on behalf of Meta (Facebook, Instagram) | Identifying your browser to measure conversions and personalize ads on Meta networks; events are transmitted to Meta from our server | 90 days |
| FPAU, FPGSID, IDE | Google Ads | Conversion measurement and remarketing on the Google network | From session to 13 months |
| __kla_id | Klaviyo | Registration forms, cart reminders, and email personalization | 13 months |
| _shopify_marketing | Shopify | Sales attribution to campaigns | 1 year |
3.4 Integrated Site Services
Certain functionalities rely on service providers whose modules load with the page: Klarna for displaying and using installment payments, Klaviyo for subscription forms, Shop Pay for accelerated checkout, and Glopal for displaying the site in your country's language and currency. Before you make your choice, Klarna and Klaviyo may store technical operating information (module version, number of pages viewed) in your browser's local storage, without advertising identifiers; their cookies are only deposited after your acceptance. The trackers specific to these providers, when you use their services, are governed by their respective policies, indicated below.
4. Data Recipients
Based on your selections, the data collected by these cookies is processed by the following service providers. Those ensuring the site's functionality, measuring engagement, and sending our communications act on our behalf; Google, Meta, and Microsoft also utilize this data for their own purposes within their advertising services.
- Shopify International Limited (Ireland), shop hosting, payment, and statistics. Privacy Policy
- Pandectes, consent management. Privacy Policy
- Addingwell SAS (France), hosting our analytics server, which relays data to Google and Meta based on your consent. Privacy Policy
- Google Ireland Limited (Ireland), Google Analytics and Google Ads. Privacy Policy
- Meta Platforms Ireland Limited (Ireland), Facebook and Instagram advertisements. Privacy Policy
- Microsoft Ireland Operations Limited (Ireland), Microsoft Clarity; Microsoft also uses these identifiers for its own purposes. Privacy Policy
- Klaviyo, Inc. (United States), emails and forms. Privacy Policy
- Klarna Bank AB (Sweden), installment payments. Privacy Policy
- Glopal (France), translation and display by country. Privacy Policy
Google, Meta, Microsoft, and Klaviyo are part of groups established in the United States and transfer a portion of the data there. These transfers are governed by the European Commission's adequacy decision of July 10, 2023, concerning the EU-U.S. Data Privacy Framework, to which these companies are certified, supplemented where applicable by the Commission's Standard Contractual Clauses. Shopify may also transfer data to Canada, which benefits from an adequacy decision. You may obtain a copy of the applicable safeguards by writing to us at the address indicated in point 7.
5. Configure Your Browser
You may also refuse or delete cookies through your browser settings. This method applies to all sites and may prevent certain features from functioning, such as remembering your shopping cart. The help pages for Chrome, Safari, Firefox, and Edge describe the procedure.
6. Data Retention Period
Audience measurement data is retained for a maximum of 14 months in Google Analytics. In Microsoft Clarity, browsing recordings are kept for 30 days, and aggregated statistics for 13 months. Data related to advertising campaigns is retained according to the policies of Google and Meta as indicated above. Data associated with your customer account or newsletter subscription is processed in accordance with our privacy policy.
7. Your Rights and Contact
You have the right to access, rectify, erase, restrict, object to, and port your personal data, as well as the right to withdraw your consent at any time via the "Cookies" link at the bottom of the page. For any questions, you may write to our Data Protection Officer, Mr. Ahmed Zerouali, at a.zerouali@herbelin.com, or by mail to MH DIFFUSION SARL, 9 rue de la Première Armée, 25140 Charquemont, France. You may also lodge a complaint with the CNIL.
