Cookie Policy – HFM.Parts

This Cookie Policy explains how HFM.Parts (operated by HFM DOT PARTS, ABN 31 489 472 505) uses cookies and similar technologies on hfm.parts. It should be read together with our Privacy Policy.

1. What cookies are

Cookies are small text files stored on your device when you visit a website. We also use similar technologies such as pixels, tags and local storage. Together they help the Site function, remember your preferences, measure performance, and support our advertising.

We use both:

First-party cookies (set by hfm.parts), and
Third-party cookies (set by our providers, e.g. payment, chat and advertising partners).

2. Categories of cookies we use

Strictly necessary (always on)

Required for the Site to work. You can't switch these off. They enable core functions like your shopping cart, checkout, secure login, and fraud prevention.

WooCommerce: cart contents, session and checkout.
WooPay / PayPal: secure payment processing and fraud checks.
Cloudflare: security, load balancing and bot protection.

Functional

Remember choices you make to improve your experience (e.g. region, recently viewed items, live-chat state).

Crisp Chat: enables and remembers your live-chat session.

Analytics / performance

Help us understand how visitors use the Site so we can improve it. Data is aggregated where possible. These only run after you accept non-essential cookies.

Google Analytics: page views, sessions, on-site behaviour.
WooCommerce Order Attribution: first-party referral / UTM source for orders (sourcebuster). Loaded only after you accept.

Advertising / targeting

Used to measure and target our advertising on Google and Meta, including retargeting and conversion measurement. Some of this also runs server-side via our tag manager (Cloudflare Zaraz), which may share a hashed identifier with Google and Meta to match conversions (see our Privacy Policy, section 5). These only run after you accept.

Google Ads: conversion tracking, Enhanced Conversions, remarketing (including gclid / wbraid / gbraid click IDs stored first-party after consent).
Meta Pixel (Facebook/Instagram): conversion tracking, Conversions API, remarketing (including _fbc / _fbp after consent).

3. Managing your cookies

Consent banner: where required, we ask for your consent to non-essential (analytics and advertising) cookies when you first visit. You can change your choice at any time via the cookie settings link in the Site footer.
Browser controls: you can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the Site (like checkout) from working.
Global Privacy Control: we honour the GPC browser signal as a valid opt-out of advertising cookies.
Advertising opt-outs:
- Google Ads Settings: adssettings.google.com
- Meta Ad Preferences: in your Facebook/Instagram account settings
- Australian industry opt-out: youradchoices.com.au

Because part of our advertising measurement runs server-side, opting out of browser cookies reduces but may not fully eliminate conversion measurement. We restrict the sharing of personal identifiers for this purpose to customers in Australia and New Zealand, and only ever in hashed form.

4. Third-party policies

The third parties above set cookies under their own policies. For more detail, see the privacy and cookie policies of Google, Meta, PayPal, WooCommerce/Stripe (WooPay), Crisp and Cloudflare.