Hiloi Cookie policy

Version applicable as of 1st August 2025

This Cookie Policy ("Policy") explains how Bewell EU (trading as Hiloi, hereinafter referred to as the "Company," "we," "us," or "our") uses cookies and other similar tracking technologies on its website (the "Website") the purposes they serve and the choices you have to manage your cookie preferences.

This Policy has been prepared in accordance with California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and other relevant state privacy law. We are committed to protecting your personal information and complying with all relevant privacy laws.

By using the Website, you acknowledge this Cookie Policy and your available privacy choices as described below. You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. This Website is not intended for or directed to minors, and we do not knowingly collect personal information from children.

Please note that we may update this Policy from time to time. Any changes will become effective immediately upon publication, and we encourage you to review this Policy regularly to stay informed about how we manage and protect your data.

1. Who is responsible for protecting your information?

We are: Bewell EU, trading as Hiloi;

Our company number is: 305788600

Our address: Gynėjų St. 4-333, LT-01109 Vilnius, Lithuania

Our e-mail address: support@hiloi.com

If you have any questions, comments, or complaints regarding how we collect, use, and store your personal information, please contact us by e-mail dpo@hiloi.com

2. What are cookies and how they are used?

Cookies are small text files stored in your browser or device that help the Company and Partners recognize you, provide certain Website features, track your visit history, and personalize content based on your preferences. They improve your experience by enhancing website performance, tailoring content, analyzing user behavior, and delivering relevant ads.

Types of cookies we use:

We use various types of cookies to ensure that our Website functions properly and provides a better user experience. Below is a description of the different categories of cookies used on our website:

Necessary cookies:

Essential for the proper functioning and security of the website. They enable core features such as secure login, page navigation, and maintaining your session. Without these cookies, some parts of the website may not operate correctly or at all. The use of these cookies is necessary for the performance of our contractual obligations when you visit our website.

Analytical cookies:

Help us analyze how visitors use the website, including which pages are visited, how long users stay on the site, and which features are most frequently accessed. This data enables us to improve the performance and functionality of the website, ensuring a better user experience for all visitors.

Marketing (Targeting) Cookies

Used to personalize advertisements and communications, ensuring that the content displayed is relevant to your interests based on your browsing behavior. We may use both first-party and third-party cookies for this purpose. These cookies also help us measure the effectiveness of advertising campaigns.

A comprehensive list of the specific cookies used on our website, including their purpose and duration, can be found in the table below.

3. How can you manage cookies?

As a user of our Website, you have full control over the cookies and tracking technologies used on our Website. You have several options for controlling cookies:

  • Clicking in Your Privacy Choices link available in the footer of our Website or This allows you to implement "Do Not Sell or Share My Personal Information" right and to opt-out of the sale or sharing of your personal information with third parties, including for cross-context behavioral advertising.
  • Enabling Global Privacy Control (GPC) or another universal opt-out mechanism (UOOM) mechanism in your browser, we honor these signals.
  • Adjusting your browser settings to accept, block, or delete cookies. (Note: blocking all cookies may impact your experience on our Website.)

For guidance on how to manage cookies in your browser, please refer to the following links for the respective browsers:

4. What are other tracking technologies and how they are used?

In addition to cookies, we may use various other tracking technologies, including pixel tags, web beacons, scripts to enhance your experience on our Website. These technologies help us analyze website performance, measure the effectiveness of our campaigns, and provide a more tailored experience. By using our Website, you provide the same consent for these tracking technologies as you do for cookies as these technologies may work alongside.

  • Pixel tags (Web beacons): These are small, invisible images or pieces of code embedded within web pages. They help track user interactions such as page views, clicks, and email open rates for analytics and marketing purposes.
  • Scripts: These are small code snippets executed on your device to track real-time interactions with our website, such as clicks, form submissions, and enabling dynamic content.

5. What third-party tracking technologies are used?

In addition to the cookies and tracking technologies set directly by our Website, we use third-party services that may place their own cookies or similar technologies on your device when you interact with our Website. These services may include tools such as Google Analytics, Facebook Pixel, Hotjar, TikTok Pixel, and other marketing and analytics providers.

When we use third-party tools such as analytics services, advertising pixels, or embedded content on our Website, those companies may act either as our service providers or as independent third parties, depending on how the information is processed.

If a company processes personal information on our behalf under a written contract that restricts how the information can be used, it acts as our service provider.

If a company collects personal information through our Website for its own purposes - such as advertising, cross-context behavioral advertising, or independent analytics - it acts as a third party. In these cases, the disclosure of personal information may be considered a “sale” or “sharing” under applicable state privacy laws. You have the right to opt out of such sale or sharing through the “Your Privacy Choices” link.

Third parties process personal information in accordance with their own privacy policies:

6. ARE COOKIES USED FOR PROFILING AND TARGETED ADVERTISING?

Certain third-party marketing and advertising cookies used on our Website allow us and our partners to analyze your browsing behavior across websites and services. This may include information about your interactions with our Website, advertisements, and other online content.

Based on this information, a profile of your interests may be created to display advertisements and content that are more relevant to you.

Where this activity constitutes “sharing” for cross-context behavioral advertising under applicable state privacy laws, you have the right to opt out through the “Your Privacy Choices”

7. WHAT ARE YOUR RIGHTS?

Depending on your state of residence, you may have the right to:

  • Know what categories of personal information we collect
  • Access, correct, or delete your personal data
  • Opt- out of the sale or sharing of personal information
  • Limit the use of sensitive personal data

You may exercise your rights by contacting us at dpo@hiloi.com.

For a full overview of your privacy rights, please refer to our Privacy Policy.

8. WHAT COOKIES AND OTHER TRACKING TECHNOLOGIES ARE USED?

Cookie Name Cookie Description Cookie Expiry
Essential Cookies and other tracking technologies:
orbio_session_id A unique session identifier used to keep a reference to the user's session, ensuring the integrity of the user's session and interactions. 12 month
GCLB Maintains load-balancing/session affinity to ensure reliable delivery of Website pages and services during your visit 12 month
__cf_bm Helps protect the Website by identifying automated traffic and supporting security controls that prevent abuse 30 minutes
apple_pay_supported Records whether Apple Pay is available in your browser/device so the relevant payment option can be displayed and used 1 month
XSRF-TOKEN Supports Website security by validating requests and helping prevent cross-site request forgery (CSRF) attacks 1 month
enence_session Maintains essential session state so the Website operates consistently as you move between pages 1 month
tracktor_session Maintains session state required for the order-tracking feature to function during your visit 1 month
srpp _(ID) Stores session/state information required for core Website functionality 3 month
l7_az Supports payment processing by maintaining session routing and service stability during PayPal transactions 1 day
ts Supports PayPal security controls, including fraud prevention and transaction integrity checks 12 month
ts_c Supports PayPal security controls, including fraud prevention and transaction integrity checks 12 month
sc_f Supports PayPal transaction processing and security controls during payment interactions 12 month
_session_server Maintains a session identifier required by the payment gateway to process transactions securely Session
AEC Supports security controls for Google services used on the Website by helping prevent misuse and fraudulent requests 6 month
cart Stores items placed in your shopping cart so they remain available as you navigate the Website 1 month
cookie-consent Stores your cookie preference choices so the Website can apply them and remember your settings 12 month
passport_csrf_token Supports security of account-related actions by helping prevent CSRF attacks 14 days
passport_csrf_token_default Supports security of account-related actions by helping prevent CSRF attacks 14 days
sessionid Stores an authenticated session identifier so you can remain logged in across pages 4 month
sessionid_ss Stores a secure/encrypted version of the authenticated session identifier to maintain login state 4 month
sid_guard Supports session security controls to help protect accounts and authenticated sessions from unauthorized access 10 month
store-country-code Stores your country/region selection so the Website can show the appropriate localized experience (e.g., language, currency, availability) 4 month
store-country-code-src Stores the source/method used to determine your country/region setting to support localization logic 4 month
store-country-sign Stores a validation value used to help protect the integrity of region/localization settings 4 month
SOCS Stores a preference state for Google services used on the Website, including consent-related settings for those services 4 month
tt_chain_token Supports security and integrity controls for third-party services loaded on the Website 6 month
octocom_session Stores a session identifier so the chatbot can function and maintain conversation context during your visit Session
octo_id Stores a persistent identifier so the chatbot can recognize your browser and maintain conversation context across visits 12 month
ef_witness Stores information used for affiliate marketing attribution and reporting 3 month
ef_affid Stores an affiliate identifier to attribute actions or purchases to an affiliate partner 3 month
ef_tid_c_o_64 Stores a tracking identifier used for affiliate/campaign attribution and reporting 3 month
ef_tid_c_a_47 Stores a tracking identifier used for affiliate/campaign attribution and reporting 3 month
Analytical Cookies and other tracking technologies:
_ga Distinguishes users for analytics so we can measure Website usage (e.g., visits, sessions) and improve performance 12 month
_clck Stores a user identifier used by Microsoft Clarity to analyze Website interactions and usage patterns 12 month
rpp Stores referral and campaign parameters for analytics so we can understand how visitors arrive at the Website 1 month
_ga_(ID) Stores session information for Google Analytics to measure Website usage and performance 12 month
_axwrt Stores an analytics identifier used to measure usage of Website features and performance metrics 12 month
_vwo_uuid_v2 Identifies a visitor for A/B testing so we can evaluate different versions of the Website 12 month
_vis_opt_s Stores A/B test participation and status information for VWO experiments 3 month
_vis_opt_test_cookie Records whether cookies are enabled so A/B testing functionality can operate correctly Session
_vwo_uuid Identifies a visitor for VWO experimentation and analytics across sessions 12 month
_vwo_ds Stores data related to experiment delivery and reporting for VWO testing 3 month
_vwo_sn Stores session information used to run and measure VWO experiments 1 month
_clsk Stores and aggregates session information for Microsoft Clarity analytics reporting 1 day
_hjSessionUser_(ID) Stores a user identifier for Hotjar analytics to recognize returning users and analyze behavior across sessions 12 month
_hjSession_(ID) Stores Hotjar session information to analyze behavior during a visit 30 minutes
CLID Stores a Clarity identifier to recognize a browser and support analytics across visits 12 month
MR Stores data used by Microsoft Clarity for analytics and reporting 6 days
SM Supports Microsoft analytics by enabling identifier synchronization across Microsoft domains Session
Marketing Cookies and other tracking technologies:
_gcl_au Measures advertising conversion performance and supports attribution of actions to advertising campaigns 3 month
_fbp Enables measurement and attribution of Meta/Facebook advertising and supports retargeting based on Website interactions 3 month
transaction_id Stores a transaction identifier used to reconcile and report affiliate attribution 3 month
_tt_enable_cookie Enables TikTok advertising measurement and attribution functionality 3 month
_ttp Measures TikTok advertising performance and supports retargeting based on Website interactions 3 month
_uetsid Stores a session identifier for Microsoft Advertising conversion measurement and attribution 1 day
_uetvid Stores a visitor identifier for Microsoft Advertising conversion measurement and attribution across visits 12 month
IDE Used by Google advertising services for advertising delivery, conversion measurement, and personalization where enabled 8 month
MSPTC Stores a Microsoft identifier used for advertising measurement, attribution, and targeting 6 month
MUID Stores a Microsoft identifier used for advertising measurement, attribution, and targeting across Microsoft services 12 month
NID Stores preferences used by Google services for advertising personalization and measurement where enabled 6 month
SAPISID Used by Google services for advertising personalization and measurement where enabled 12 month
SRM_B Stores an identifier used by Microsoft Bing for advertising measurement and targeting 12 month
__Secure-1PAPISID Used by Google services for advertising personalization and measurement where enabled 12 month
__Secure-3PAPISID Used by Google services for advertising personalization and measurement where enabled 12 month
__Secure-ENID Stores advertising preference state used by Google services for ad delivery/personalization where enabled 6 month
uniqueClick Stores data used to measure advertising click activity and support attribution reporting Session
DV Used by Google services for advertising delivery, measurement, and personalization where enabled 1 day
odin_tt Used by TikTok services for advertising measurement and campaign reporting 12 month
_nb_id Stores a visitor identifier used for marketing attribution across sessions to measure which channels lead to conversions 12 month
_nb_session Stores session-level attribution information used for marketing measurement during a visit 30 minutes
northbeam_pixel_id Stores an identifier used to ensure correct operation of the attribution pixel for marketing measurement 12 month
ad-id Stores an identifier used by Amazon Advertising for ad delivery, conversion measurement, and attribution 12 month
ad-privacy Stores Amazon Advertising privacy/consent settings to apply advertising controls 12 month
amzn_associated_id Stores an affiliate/attribution identifier used to link actions to an Amazon campaign or partner 1 month
APISID Stores a Google identifier used by Google services to support service functionality and, where enabled, advertising measurement and personalization 12 month
HSID Stores a Google identifier used for security controls and authentication, and may also support advertising-related functions where Google services are enabled 12 month
SID Stores a Google identifier used for authentication and security controls for Google services enabled on the Website 12 month
SIDCC Stores a Google security-related value used to help protect against unauthorized access and fraudulent requests when Google services are enabled 12 month
SSID Stores a Google identifier used to support preferences and service functionality for Google services enabled on the Website 12 month
__Secure-1PSID Stores a Google identifier used for secure service functionality and, where enabled, advertising measurement and personalization 12 month
__Secure-1PSIDCC Stores a secure value used to protect session integrity and security controls for Google services enabled on the Website 12 month
__Secure-3PSID Stores a Google identifier used for secure service functionality and, where enabled, advertising measurement and personalization 12 month
__Secure-3PSIDCC Stores a secure value used to protect session integrity and security controls for Google services enabled on the Website 12 month
uid_tt Stores a TikTok identifier used to recognize a browser and support advertising measurement, attribution, and related service functionality 6 month
uid_tt_ss Stores a secure version of the TikTok identifier used to recognize a browser for advertising measurement and attribution 4 month
tta_attr_id_mirror Stores an identifier used to measure and attribute actions to TikTok advertising campaigns (attribution/measurement) 10 month
ttwid Stores a TikTok identifier used for advertising measurement and attribution across visits 12 month
c Stores an identifier used by PayPal for measurement and analytics relating to PayPal services usage and transaction performance 12 month
sid_tt Stores a TikTok identifier used for advertising measurement, attribution, and related service functionality 4 month
tt_csrf_token Stores a security token used to help protect requests associated with TikTok services loaded on the Website Session
msToken Stores a value used by TikTok services to support security and integrity controls 10 days
sid_ucp_v1 Stores an identifier used by TikTok services to support service operation and advertising measurement/attribution 44 days
ssid_ucp_v1 Stores a secure identifier used by TikTok services to support service operation and advertising measurement/attribution 44 days

End of cookie policy.

Your Cookie Preferences

Cookies and similar technologies help us to enhance your experience, analyze site performance, and deliver personalized content and ads through our analytics and advertising partners. To learn more, check out our Cookie Policy

You’re in control. You can choose what cookies to allow and forbidden us to Share or Sell your Personal information: