Cookie Policy
Last updated: 15 October 2026
You can change or withdraw your cookie choices at any time. Optional cookies stay off unless you turn them on.
1. Introduction and scope
This Cookie Policy explains how Divyank Industries Pvt. Ltd. ("HIMAJAL", "we", "us") uses cookies and similar technologies on himajal.com. It applies to everyone who visits the website, whether or not you have an account. It should be read together with our Privacy Policy, which explains how we handle personal data more generally.
2. What cookies and similar technologies are
A cookie is a small text file a website stores in your browser. Local storage and session storage are similar browser features that keep data on your device; session storage is cleared when you close the tab. Websites may also load scripts or embedded content (such as videos) from other companies, which can send information about your visit to those companies. In this policy, "cookies" covers all of these unless we say otherwise, and the tables below state the exact type of each item.
3. Why HIMAJAL uses them
We use strictly necessary technologies to run the website — your cart, sign-in, checkout and support chat. With your permission only, we use optional technologies to measure how the site is used, to measure our advertising, and to show embedded videos and maps.
4–7. Cookie categories
We group cookies into four categories. Only the first is always on. Accepting one optional category never turns on another — for example, accepting Analytics does not enable Advertising.
4. Strictly Necessary cookies Always on
Keep you signed in, protect forms against forgery, keep your cart and wishlist, run the support chat, complete checkout, and remember your cookie choices. The site cannot function properly without these.
| Name | Provider | Type | Purpose | Retention | Source of details |
|---|---|---|---|---|---|
| hm_consent | HIMAJAL First-party · himajal.com | Cookie | Stores your cookie choices (categories, date, policy version). Contains no personal data. | 180 days | Set by our website code |
| __Secure-authjs.session-token | HIMAJAL (Auth.js) First-party · himajal.com | HttpOnly cookie | Keeps you signed in to your account. Set only after you log in. | Up to 7 days | Set by our website code |
| __Host-authjs.csrf-token | HIMAJAL (Auth.js) First-party · himajal.com | HttpOnly cookie | Security token that protects sign-in forms against cross-site request forgery. | Browser session | Set by our website code |
| __Secure-authjs.callback-url | HIMAJAL (Auth.js) First-party · himajal.com | HttpOnly cookie | Remembers which page to return you to after signing in. | Browser session | Set by our website code |
| hm_chat_id | HIMAJAL First-party · himajal.com | HttpOnly cookie | Random ID that links your browser to its support-chat conversation so the transcript survives page changes. | 90 days | Set by our website code |
| himajal-cart-v3 | HIMAJAL First-party · himajal.com | Local storage | Keeps the items and coupon in your shopping cart. | Until you clear it or complete an order | Set by our website code |
| himajal-wishlist-v3 | HIMAJAL First-party · himajal.com | Local storage | Keeps the products you saved to your wishlist. | Until you clear it | Set by our website code |
| PayU checkout | PayU Payments Pvt. Ltd. Third-party · payu.in | Script / network request | Processes your payment. PayU's own cookies are set on PayU's pages, not on himajal.com. | Set by PayU | Set by our website code |
5. Analytics cookies Optional — consent required
Measure visits, the pages and products viewed, how visitors move through the site, enquiry and checkout conversions, and page performance (Core Web Vitals). Used only in aggregate to improve the website.
| Name | Provider | Type | Purpose | Retention | Source of details |
|---|---|---|---|---|---|
| Google Tag Manager | Google LLC Third-party · googletagmanager.com | Script / network request | Loads the tags configured in our Tag Manager container. Tag Manager itself does not set cookies. | — | Set by our website code |
| _ga | Google Analytics 4 First-party · himajal.com | Cookie | Distinguishes visitors so visits can be counted. | 2 years | Per provider documentation |
| _ga_<container-id> | Google Analytics 4 First-party · himajal.com | Cookie | Keeps the state of the current analytics session. | 2 years | Per provider documentation |
| _clck | Microsoft Clarity First-party · himajal.com | Cookie | Keeps a Clarity user ID so heatmaps and session recordings can be grouped. | 1 year | Per provider documentation |
| _clsk | Microsoft Clarity First-party · himajal.com | Cookie | Joins multiple page views into one session recording. | 1 day | Per provider documentation |
| CLID / MUID | Microsoft Clarity / Microsoft Third-party · clarity.ms / bing.com | Cookie | Identify the browser across sites that use Clarity. | 1 year | Per provider documentation |
| hm-pending-purchase | HIMAJAL First-party · himajal.com | Session storage | Holds order totals between checkout and the success page so a purchase event can be recorded. No personal data. | Until the success page loads or the tab closes | Set by our website code |
6. Advertising & Marketing cookies Optional — consent required
Measure whether our Facebook/Instagram campaigns lead to enquiries and purchases, and allow remarketing to people who have visited the site. Accepting Analytics does not turn these on.
| Name | Provider | Type | Purpose | Retention | Source of details |
|---|---|---|---|---|---|
| _fbp | Meta Platforms (Meta Pixel) First-party · himajal.com | Cookie | Identifies the browser for Meta ad measurement and remarketing. | 90 days | Per provider documentation |
| _fbc | Meta Platforms (Meta Pixel) First-party · himajal.com | Cookie | Stores the ad-click ID when you arrive from a Facebook/Instagram ad. | 90 days | Per provider documentation |
| fr | Meta Platforms Third-party · facebook.com | Cookie | Delivers and measures ads for people logged in to Facebook/Instagram. | 90 days | Per provider documentation |
| Google Ads tags (e.g. _gcl_au) | Google LLC First-party · himajal.com | Cookie | Conversion measurement for Google Ads — only if Google Ads tags are added inside our Tag Manager container. | 90 days (if used) | Per provider documentation |
7. Functional & Embedded Media cookies Optional — consent required
Play product and demo videos hosted on YouTube and show our location on Google Maps inside our pages. These services may store data in your browser and receive your IP address when they load. If you leave this off, you can still open them on youtube.com or Google Maps.
| Name | Provider | Type | Purpose | Retention | Source of details |
|---|---|---|---|---|---|
| YouTube (youtube-nocookie.com) player | Google LLC (YouTube) Third-party · youtube-nocookie.com / youtube.com | Script / network request | Plays embedded videos. Uses privacy-enhanced mode, but YouTube may still use local storage and cookies once a video plays. | Set by YouTube | Set by our website code |
| Google Maps embed | Google LLC Third-party · google.com | Script / network request | Shows the location of the HIMAJAL Experience Centre on the Contact page. | Set by Google | Set by our website code |
8. First-party and third-party cookies
First-party cookies are set on himajal.com — by our own code or by a provider's script running on our pages (for example Google Analytics' _ga). Third-party cookies are set on another company's domain, such as facebook.com or youtube.com, and are governed by that company's policies. We can delete first-party cookies when you withdraw consent, but we cannot delete cookies stored on other companies' domains.
9. Cookie names, purposes, providers and retention
The tables above list each item we use. Where a detail is marked "Per provider documentation", it comes from the provider's published information and may change when the provider updates its software. Providers may also set additional cookies not listed here. We review this list when we add or change a service.
10. How we collect, store and let you change consent
- On your first visit we show a banner with three equal choices: Accept All, Reject Non-Essential and Manage Preferences. Optional categories are never pre-selected.
- Until you choose, no optional analytics, advertising or embedded-media services are loaded.
- Your choice is stored in a first-party cookie named
hm_consentfor 180 days. It records only the categories you allowed, the date and the policy version — no name, email or other personal details. - We ask again when the cookie expires or when this policy changes in a way that affects your choices.
- You can change your choice at any time using Cookie Settings in the website footer or the button on this page.
- When you withdraw a category, we stop loading those services, signal the withdrawal to Google, Meta and Microsoft where their tools support it, delete the related cookies we can remove from himajal.com, and reload the page. Withdrawal does not affect processing that happened before it, and it cannot recall data already sent to a third party.
Where we use Google services, we use Google Consent Mode to tell Google tags whether you have allowed analytics (analytics_storage) and advertising (ad_storage, ad_user_data, ad_personalization) storage. All of these default to "denied".
11. Third-party services
These companies process data under their own privacy policies:
- Google (Analytics, Tag Manager, YouTube) — How Google uses data from sites that use its services: https://policies.google.com/technologies/partner-sites
- Microsoft Clarity — Clarity cookies: https://learn.microsoft.com/clarity/setup-and-installation/cookie-list
- Meta Platforms (Facebook / Instagram) — Cookies policy: https://www.facebook.com/privacy/policies/cookies/
- PayU
Some of these providers are based outside India, so data they receive may be processed in other countries under their own safeguards.
12. Managing cookies in your browser
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop your cart, sign-in or checkout from working. Browser help pages: Chrome, Firefox, Safari, Edge. Meta also offers ad settings at facebook.com/adpreferences, and Google at myadcenter.google.com.
13. Security and privacy
Sign-in and chat cookies are HttpOnly (not readable by page scripts) and, on himajal.com, sent only over HTTPS. Our consent cookie uses SameSite=Lax and the Secure flag over HTTPS. We do not use device fingerprinting or other techniques to identify visitors who decline cookies.
14. Your rights
Where we rely on your consent, you may withdraw it as easily as you gave it. Your wider rights over your personal data — including under India's Digital Personal Data Protection Act, 2023 — are described in our Privacy Policy.
15. Contact and updates
Questions about this policy: privacy@himajal.com or support@himajal.com, Divyank Industries Pvt. Ltd., Hyderabad, Telangana, India. We will update the "Last updated" date when this policy changes, and ask for your choice again when a change affects it.