Skip to content

Privacy Policy

Last Updated: October 2026

Heritage Loom respects the privacy of every visitor and customer. This Privacy Policy explains how we collect, use, store, and protect the personal information you provide when using our website.

By accessing or using the Heritage Loom website, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following information:

  • Full name
  • Company name (if applicable)
  • Email address
  • Phone number
  • Billing and shipping address
  • Payment information (processed through secure payment providers)
  • Order history
  • Communications through our contact forms, email, or WhatsApp
  • Device information such as IP address, browser type, and website usage data

2. How We Use Your Information

We use your information to:

  • Process orders and deliveries
  • Provide customer support
  • Respond to inquiries and requests
  • Manage customer accounts
  • Send product updates, promotions, or marketing communications (with your consent)
  • Improve our website and user experience
  • Show and measure Heritage Loom's advertising (with your consent)
  • Comply with applicable legal obligations

3. Cookies and Analytics

The Heritage Loom website uses cookies and browser local storage to remember your preferences, such as your language and cookie consent, to understand how the website is used, and, with your consent, for advertising.

Google Analytics

We use Google Analytics 4, a web analytics service provided by Google LLC, to measure the number of visitors, pages viewed, visit duration, traffic sources, approximate location (country or city level), and the type of device and browser used. We also record a few actions on the website, namely adding a product to the enquiry cart, sending the inquiry form, and clicking a WhatsApp or email link, without including what you typed or your contact details, so we know how many visits lead to an enquiry.

Google Analytics is only activated after you choose Accept all or Analytics only in the cookie banner. It then sets cookies in your browser (such as _ga) to distinguish one visitor from another. Usage data is sent to and processed by Google, including on servers that may be located outside Indonesia. Google Analytics 4 does not log or store your IP address.

We only view this data as aggregated statistical reports, to improve our website and services and to measure our advertising (see Google Ads below), and we do not use it to identify you personally.

Google Ads

We advertise through Google Ads, an advertising service provided by Google LLC. If you choose Accept all in the cookie banner, the Google tag on this website is also used for two things: to measure how many clicks on our ads lead to an action on the website (adding a product to the enquiry cart, sending the inquiry form, or clicking a WhatsApp or email link), and to show our ads again to people who have visited this website (remarketing) on Google Search, YouTube and Google's partner sites.

To do so, Google sets advertising cookies in your browser (such as _gcl_au and _gcl_aw on this website, and Google's own cookies on Google domains) and receives information such as the pages you visit, those actions, and identifiers of your device and browser. Processing by Google is subject to Google's privacy policy.

With Accept all, when you send a form on this website, such as the inquiry form or the shipping estimate, the Google Ads tag may also pick up details you entered, such as your name, email address and phone number, and the country, city and postal code, to match that action to a click on our ads (enhanced conversions). Your name, email address and phone number are hashed in your browser before they are sent, so Google does not receive them as plain text; the country, city and postal code may be sent as they are.

If you choose Analytics only, no advertising cookies are set and your visit is not used for remarketing or personalised ads. Because our Google Analytics is linked to Google Ads, however, Google Analytics may still tell Google Ads, without advertising cookies, when you take one of the actions above, so that the number of clicks on our ads that lead to those actions can be counted, or estimated statistically by Google. To do so, Google receives information such as that action and the page it happened on (including the ad click code in the page address, if you came from one of our ads), the random identifier from the Google Analytics cookie, and the type of your device and browser. The contact details you enter into our forms are not sent.

If you choose Decline, neither Google Analytics nor the Google Ads tag is loaded at all, so no analytics or advertising cookies are set and your visit is not used for our advertising. You can also manage personalised ads for your Google account in Google's My Ad Center.

Google Maps

Our Contact page can display a map from Google Maps. The map only loads after you press the Show Map button. When it loads, Google may set cookies in your browser and receive information such as your IP address and browser type, in accordance with Google's privacy policy.

Cloudflare Turnstile

The contact form on this website is protected by Cloudflare Turnstile, a visitor verification service from Cloudflare, Inc., which tells genuine visitors apart from automated submissions. When a page containing the form is opened, Cloudflare may receive your IP address, device and browser type, and other technical signals needed for that check.

Turnstile sets no tracking cookies and is not used for profiling or advertising. It therefore runs without waiting for cookie consent — without it, the form cannot be protected from abuse. Processing by Cloudflare is subject to the Cloudflare privacy policy.

Country Detection (ipinfo.io)

We show prices in rupiah for visitors in Indonesia and in US dollars everywhere else, on our enquiry form the phone field fills in your country dialling code for you, and the DHL shipping estimate starts from the same country as its destination. To do all three, our server asks ipinfo.io (IPinfo LLC) which country your IP address belongs to. Only the IP address is sent, and only a country code (for example ID) comes back — no precise location and nothing that identifies you.

This check sets no cookies and is not used for tracking. The answer is stored in your browser for up to seven days so prices can appear straight away on your next visit, and the check is still repeated each time the site is opened, so the currency follows the country you are in at the time. You can always pick a different dialling code, or a different destination for the shipping estimate, by hand; the currency shown follows the country found.

Shipping Estimates and Shipment Tracking (DHL Express)

If you estimate shipping on a product page or in the cart, our server sends the destination country, city and postal code you enter, together with the number, size and weight of the parcels, to DHL Express (part of DHL Group) to obtain rates and transit times. If you track a shipment on our Track Shipment page, our server sends the waybill number you enter to DHL. Your name, full address, email address and phone number are not sent, and the Track Shipment page only shows the status and history of Heritage Loom shipments, never the name or address of their recipient.

We do not store the destinations or waybill numbers you enter. So that DHL is not asked the same thing again and again, its answers are kept for a while in our server's memory (ten minutes for tracking, a few hours for rates, up to seven days for address checks), without being linked to you. To prevent abuse, the server also counts for ten minutes how often an IP address asks for an estimate or a tracking lookup. While the page is open, your last destination is remembered in the browser's memory so the cart can use it straight away; it is gone when the page is closed or reloaded, and is never kept in cookies or browser storage. Processing by DHL is subject to the DHL privacy policy.

If you estimate shipping in your cart, the service, the destination and the estimated shipping cost are included in the WhatsApp message you send us.

Managing Cookies

You can change your analytics and advertising cookie consent at any time through the Cookie Settings link at the bottom of every page. If you withdraw advertising consent, the advertising cookies on this website are removed; if you decline or withdraw consent altogether, Google Analytics is disabled as well and its cookies are removed from your browser. Your choice is stored in your browser for 12 months, after which we will ask again, or sooner if what you are asked to agree to changes.

You can also refuse or delete cookies through your browser settings. To opt out of Google Analytics on all websites, you can install the Google Analytics Opt-out Browser Add-on. For more details, see How Google uses information from sites or apps that use its services.

If cookies are disabled, some website features, such as remembering your language preference, may not work properly.

4. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, misuse, loss, alteration, or disclosure.

While we strive to safeguard your data, no internet transmission or electronic storage method can be guaranteed to be completely secure.

How Long We Keep Your Data

Enquiries you send through our contact form are kept for as long as they are needed to follow up on the enquiry and to maintain our business relationship with you. We do not set a fixed time limit, because wholesale and export orders often develop over a long period.

You can ask us to erase your personal data at any time by contacting Heritage Loom through the details shown on this website. Once we have verified your request, the data is removed from our systems.

5. Information Sharing

Heritage Loom does not sell, rent, or trade your personal information.

We may share your information only with:

  • Payment service providers
  • Shipping and logistics partners, including DHL Express for shipping estimates, tracking and delivery
  • Technology service providers supporting our website operations, including Google as our analytics, advertising and maps provider, Cloudflare as our form security verification provider, and IPinfo as our IP-based country lookup provider
  • Government authorities when required by applicable law

These parties receive only the information necessary to perform their services.

6. International Data Processing

As Heritage Loom serves customers worldwide, certain personal information may be processed for international shipping, customs clearance, and export administration in accordance with applicable laws and regulations.

7. Your Rights

Depending on applicable laws, you may have the right to:

  • Access your personal information
  • Correct inaccurate or incomplete information
  • Request deletion of your personal data
  • Withdraw consent for marketing communications at any time

Requests can be submitted through Heritage Loom's official contact channels.

8. Third-Party Websites

Our website may contain links to third-party websites. Heritage Loom is not responsible for the privacy practices or content of those external websites.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will become effective once published on this page, along with the updated revision date.

10. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact Heritage Loom through our Contact Us page or our official company email.