Cookie Policy
1 Introduction
With this cookie policy, Santa Maria Novella Japan K.K. (hereinafter referred to as "we") provides the following information on the use of cookies on the website accessible at the URL: https://jp.smnovella.com/ (hereinafter referred to as the "Site").
2 What are cookies?
Cookies are small fragments of text, usually consisting of letters and/or numbers, which are sent by the Site when you visit the Site and stored by the browser installed on the Device you are using for browsing, such as: a computer, tablet, mobile phone or other mobile Device (collectively referred to as the "Device"). Cookies are then sent back to the Site the next time you visit.
3 Definitions
- First-party cookies: these come from the Site and may be permanent or temporary; they may be used to store information that will be reused the next time you visit the Site;
- Third-party cookies: these are installed by a different domain, for example, if the Site incorporates elements from other sites, ads and advertising content.
- Session cookies: these only last for as long as you are browsing the Site, following which they will be deleted from your device.
- Permanent cookies: these are stored on your device for as long as set out in the table below under the “duration” column, after which they will be deleted unless you re-visit the Site.
4 The cookies used on our site
4.1 Strictly required cookies
These cookies, indicated as “Strictly required” in the table, are used to ensure the operation of our services and allow us to improve performance. These technologies allow our Site, services, apps and tools to store important information in your browser or Device and then use it to identify you later on our servers or internal systems. Where applicable, we protect cookies and other similar technologies to ensure that only the Data Controller and/or our authorized service providers can interpret them by assigning a unique code.
Cookie |
Description |
Duration |
Cookie type |
_Brochure_session |
Used in connection with browsing through site. |
- |
First Party |
_ab |
Used in connection with access to admin. |
2y |
First Party |
_cmp_a |
Used for managing customer privacy settings. |
1d |
First Party |
_customer_account_shop_sessions |
Used in combination with the _secure_account_session_id cookie to track a user's session for new customer accounts. |
30d |
First Party |
_secure_account_session_id |
Used to track a user's session for new customer accounts |
30d |
First Party |
_secure_session_id |
Used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected. |
24h |
First Party |
_shopify_country |
For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request. |
session |
First Party |
_shopify_m |
Used for managing customer privacy settings. |
1y |
First Party |
_shopify_tm |
Used for managing customer privacy settings. |
30min |
First Party |
_shopify_tw |
Used for managing customer privacy settings. |
2w |
First Party |
_storefront_u |
Used to facilitate updating customer account information. |
1min |
First Party |
_tracking_consent |
Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region. |
1y |
First Party |
c |
Used in connection with checkout. |
1y |
First Party |
card_update_verification_id |
Used in connection with checkout. |
20m |
First Party |
cart |
Used in connection with shopping cart. |
2w |
First Party |
cart_currency |
Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout. |
2w |
First Party |
cart_sig |
A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations. |
2w |
First Party |
cart_ts |
Used in connection with checkout. |
2w |
First Party |
cart_ver |
Used in connection with shopping cart. |
2w |
First Party |
checkout |
Used in connection with checkout. |
4w |
First Party |
checkout_queue_checkout_token |
Used in connection with checkout. |
1y |
First Party |
checkout_queue_token |
Used in connection with checkout. |
1y |
First Party |
checkout_session_lookup |
Used in connection with checkout. |
3w |
First Party |
checkout_session_token |
Used in connection with checkout. |
3w |
First Party |
checkout_session_token_<<token>> |
Used in connection with checkout. |
3w |
First Party |
checkout_token |
Used in connection with checkout. |
1y |
First Party |
checkout_worker_session |
Used in connection with checkout. |
3d |
First Party |
cookietest |
Used to ensure our systems are working correctly |
1m |
First Party |
customer_account_locale |
Used in connection with new customer accounts |
1y |
First Party |
customer_account_new_login |
Used in connection with customer authentication |
20m |
First Party |
customer_account_preview |
Used in connection with customer authentication |
7d |
First Party |
customer_payment_method |
Used in connection with checkout. |
1h |
First Party |
customer_shop_pay_agreement |
Used in connection with checkout. |
20m |
First Party |
discount_code |
Used in connection with checkout. |
session |
First Party |
dynamic_checkout_shown_on_cart |
Used in connection with checkout. |
30min |
First Party |
hide_shopify_pay_for_checkout |
Used in connection with checkout. |
session |
First Party |
identity-state |
Used in connection with customer authentication |
24h |
First Party |
identity-state-<<token>> |
Used in connection with customer authentication |
24h |
First Party |
identity_customer_account_number |
Used in connection with customer authentication |
12w |
First Party |
keep_alive |
Used in connection with buyer localization. |
2w |
First Party |
localization |
Used in connection with checkout. |
2w |
First Party |
login_with_shop_finalize |
Used in connection with customer authentication |
5m |
First Party |
master_device_id |
Used in connection with merchant login. |
2y |
First Party |
order |
Used in connection with order status page. |
3w |
First Party |
pay_update_intent_id |
Used in connection with checkout. |
20m |
First Party |
preview_theme |
Used in connection with the theme editor |
session |
First Party |
previous_step |
Used in connection with checkout. |
1y |
First Party |
profile_preview_token |
Used in connection with checkout. |
5m |
First Party |
remember_me |
Used in connection with checkout. |
1y |
First Party |
secure_customer_sig |
Used to identify a user after they sign into a shop as a customer so they do not need to log in again. |
1y |
First Party |
shop_pay_accelerated |
Used in connection with checkout. |
1y |
First Party |
shopify-editor-unconfirmed-settings |
Used in connection with the theme editor |
16h |
First Party |
shopify_pay |
Used in connection with checkout. |
1y |
First Party |
shopify_pay_redirect |
Used in connection with checkout. |
1 hour, 3w or 1y depending on value |
First Party |
signed_in |
Used in connection with Shop login. |
1y |
First Party |
source_name |
Used in combination with mobile apps to provide custom checkout behavior, when viewing a store from within a compatible mobile app. |
session |
First Party |
storefront_digest |
Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected. |
2y |
First Party |
tracked_start_checkout |
Used in connection with checkout. |
1y |
First Party |
user |
Used in connection with Shop login. |
1y |
First Party |
wpm-test-cookie |
Used to ensure our systems are working correctly. |
session |
First Party |
Strictly required cookies do not require your consent to be installed on your Device. You can configure your browser to block or receive notifications about these cookies, but this will prevent certain parts of the Site from functioning. These cookies do not store any personal information.
4.2 Analytics cookies
These cookies, indicated as “Analytics” in the table, allow us to count visits and traffic sources so that we can measure and improve the performance of the Site. They help us to know which pages are the most and least popular and to see how visitors move around the Site. All information collected by cookies is aggregated and therefore anonymous.
Cookie |
Description |
Duration |
Cookie type |
_ga |
ID used to identify users |
2 y |
Third Party |
_landing_page |
Track landing pages. |
2w |
First Party |
_orig_referrer |
Track landing pages. |
2w |
First Party |
_s |
Shopify analytics. |
30min |
First Party |
_shopify_d |
Shopify analytics. |
session |
First Party |
_shopify_fs |
Shopify analytics. |
30min |
First Party |
_shopify_ga |
Shopify and Google Analytics. |
session |
First Party |
_shopify_s |
Shopify analytics. |
30min |
First Party |
_shopify_sa_p |
Shopify analytics relating to marketing & referrals. |
30min |
First Party |
_shopify_sa_t |
Shopify analytics relating to marketing & referrals. |
30min |
First Party |
_shopify_y |
Shopify analytics. |
1y |
First Party |
_y |
Shopify analytics. |
1y |
First Party |
customer_auth_provider |
Shopify analytics. |
session |
First Party |
customer_auth_session_created_at |
Shopify analytics. |
session |
First Party |
unique_interaction_id |
Shopify analytics. |
10min |
First Party |
Analytics cookies do not require your consent to be installed on your Device. You can configure your browser to block or receive notifications about these cookies, but this will prevent certain parts of the Site from functioning. These cookies do not store any personal information.
4.3 Functional cookies
These cookies, indicated as “Functional” in the table, allow our Site to offer additional features and personal settings. They may be set by us or by third-party service providers that we have placed on our pages. If you do not allow these cookies, these or some of these services may not function properly.
Cookie |
Description |
Duration |
Cookie type |
__cf_bm |
Cloudflare's bot products identify and mitigate automated traffic to protect your site from bad bots. Cloudflare places the __cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for the proper functioning of these bot solutions. |
session |
Third Party |
_cfuvid |
The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address. |
session |
Third Party |
swym-email |
This stores the email address when the shopper logs into the store or when the shopper authenticates their wishlist or subscribes for a back-in-stock alert. |
1 year |
Third Party |
swym-pid |
Unique identifier to track merchants and their wishlist settings. |
1 year |
Third Party |
swym-session-id |
This is a general-purpose platform session cookie used to maintain an anonymous user session. |
30 min |
Third Party |
swym-swymRegid |
This cookie is used to store an encrypted version of the user's device ID and information on the user’s session. |
1 year |
Third Party |
swym-v-ckd |
Related to swym app versioning systems. |
1 year |
Third Party |
test_cookie |
This cookie is set by DoubleClick (which is owned by Google) to determine if the website visitor's browser supports cookies. |
1 year |
Third Party |
Functional cookies do not require your consent to be installed on your Device. You can configure your browser to block or receive notifications about these cookies, but this will prevent certain parts of the Site from functioning. These cookies do not store any personal information.
4.4 Marketing cookies
We may use these cookies, indicated as “Marketing” in the table, - whether First-party cookies or Third-party cookies - to propose content, including advertising relevant to your interests, on our Site or on third-party sites. This includes the use of technology to better assess the usefulness of advertisements and content presented to the user, for example by monitoring whether the user has clicked on an advertisement or not.
We may work with other companies, generally known as service providers, which are authorized to use cookies or similar technologies to store data on our sites or in our services, apps and tools. These service providers enable us to offer you a better, faster and safer experience on our Site.
These service providers may use these technologies to help us provide you with our content and advertising and to create anonymous site statistics and analysis. We do not allow any of our service providers to collect your personal information on our Site or through our services, apps or tools for their own purposes. These service providers are subject to confidentiality agreements with us and other legal restrictions on the use or collection of any personal information. The use of user cookies is governed by the privacy policy of such third parties.
Except for the use of such technologies by our service providers or other authorized third parties, we do not accept on the Site any content from entities (such as advertisements, user communications, direct contact, comments, reviews, etc.) to include or use cookies, web beacons, local storage or similar technologies in order to track or capture your personal information.
Cookie |
Description |
Duration |
Cookie type |
__hssc |
This cookie keeps track of sessions. |
30 min |
Third Party |
__hssrc |
Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. |
session |
Third Party |
__hstc |
The main cookie for tracking visitors. |
13 m |
Third Party |
_fbp |
Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. |
4 m |
Third Party |
_gcl_au |
Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. |
3 m |
Third Party |
hubspotutk |
This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts. |
13 m |
Third Party |
Your Explicit Consent is required for marketing and profiling cookies and social network cookies. Refusal to consent to the use of profiling and marketing cookies and social network cookies will not affect your ability to access the Site, except that you will not be able to access those features or content that utilize such cookies.
If you reject Marketing cookies, you will still see our advertisements, but it will not be targeted to your interests.
5 How can I control cookies?
The first time you access the Site, you will see a banner containing brief information on the use of cookies and a link ("Manage your cookies") through which you can easily choose which cookies to install.
Please note that you can also control and delete individual cookies using the settings of most browsers.
Your choice will have different consequences depending on the category of cookies selected.
This Cookie Policy was issued and is effective from 15 of March 2025.