Cookie Policy
Cookie Policy
DRIP HAUS PTY LTD · ABN 68 665 152 205
Use of Cookies and Tracking Technologies on driphaus.com.au
| Document Code | DH-COMP-POL-022 |
| Version | v1.0 — July 2026 |
| Entity | Drip Haus Pty Ltd | ABN 68 665 152 205 |
| Website | driphaus.com.au |
| Legislative Basis | Privacy Act 1988 (Cth) | Australian Privacy Principles (APPs 1, 3, 5, 11) |
| Related Documents | Privacy Policy — driphaus.com.au/policies/privacy-policy |
| Contact | admin@driphaus.com.au | +61 440 139 440 |
| Review Cycle | Annually, or when new tracking technologies are added to the website |
This Cookie Policy explains what cookies and similar tracking technologies are, which ones Drip Haus uses on driphaus.com.au, why we use them, and how you can manage your preferences. Read it alongside our Privacy Policy, which explains more broadly how we collect, hold, use, and disclose your personal information.
Under the Australian Privacy Act 1988 (Cth), cookies and tracking technologies that collect information that can identify you — or be linked to you — may constitute collection of personal information. This Policy is our APP 1 and APP 5 disclosure for that collection.
1. What Are Cookies?
A cookie is a small text file placed on your device (computer, tablet, or smartphone) when you visit a website. Cookies are sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. They serve a range of purposes: keeping you logged in, remembering your preferences, helping us understand how visitors use our site, and enabling us to show you relevant advertising on other platforms.
Cookies are not programs and cannot carry viruses or install malware. They can, however, be used to track your browsing behaviour across websites — which is why transparency about their use matters, and why Australian privacy law requires us to disclose how we use them.
1.1 Cookie Types by Duration
- Session cookies — exist only while your browser is open. Deleted automatically when you close the browser. Used to maintain continuity during a single visit (e.g. keeping items in your cart).
- Persistent cookies — remain on your device after the browser is closed, until they expire or are manually deleted. Used for things like remembering your login, analytics, and ad targeting.
1.2 Similar Tracking Technologies
In addition to cookies, this website may use:
- Pixels (web beacons / tracking pixels) — invisible 1×1 pixel images embedded in a web page or email that record when you have viewed that page or opened that email. Used by Meta (Facebook) and Google for advertising measurement.
- Local storage — browser-based storage similar to cookies but with a larger capacity and no automatic expiry. Used by some booking and analytics tools.
- Session replay tools — if used, these record mouse movements, clicks, and scroll behaviour on the site to help us understand usability. Any such tool will be disclosed specifically in Section 6.
2. Our Four Cookie Categories
We group cookies into four categories based on their purpose. Your rights and choices differ between categories.
1. Essential — Required for the website to function. Cannot be switched off.
2. Analytics — Help us understand how visitors use the site. Off by default.
3. Marketing — Used to show you relevant advertising on other platforms. Off by default.
4. Functional — Enhance your experience with added features. Off by default.
Categories 2, 3, and 4 are only placed on your device with your prior consent, obtained through the cookie consent banner on your first visit to the site.
3. Essential Cookies — Always Active
Essential cookies are strictly necessary for this website to operate. They enable core functions such as page navigation, session management, and checkout. The website cannot function properly without them. Under Australian privacy law, these cookies may be placed without prior consent as they are necessary for the delivery of the online service you have requested.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _shopify_session | Shopify | Manages your browsing session — keeps you logged in and maintains your cart across pages. | Session |
| _shopify_tm | Shopify | Supports anti-fraud and bot detection during checkout. | Session |
| _shopify_fs | Shopify | Fraud prevention — records the first visit timestamp to detect unusual session behaviour. | 30 minutes |
| cart | Shopify | Stores the contents of your shopping cart so items are retained when you navigate away and return. | 2 weeks |
| cart_sig | Shopify | Validates cart integrity to prevent tampering. | 2 weeks |
| cart_ts | Shopify | Stores cart timestamp for session synchronisation. | 2 weeks |
| secure_customer_sig | Shopify | Authenticates a logged-in customer account. Required to access any password-protected area of the site. | 20 years |
| _orig_referrer | Shopify | Records the source URL from which you arrived — used for internal analytics and fraud prevention. | 2 weeks |
| _landing_page | Shopify | Tracks the landing page URL of your visit for session continuity. | 2 weeks |
| cookieconsent | Drip Haus | Records your cookie consent preferences so the banner is not shown on every visit. | 1 year |
4. Analytics Cookies — Consent Required
Analytics cookies help us understand how visitors interact with our website — which pages are visited most, how long people spend on them, and where visitors come from. This information is aggregated and used to improve the site experience. No information collected through these cookies is sold to third parties. These cookies are only placed on your device if you consent.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Primary Google Analytics cookie. Assigns a unique ID to distinguish users and calculate visit, session, and campaign data for analytics reports. | 2 years |
| _gid | Google Analytics | Distinguishes individual users in Google Analytics. Used to calculate session data. Expires more quickly than _ga. | 24 hours |
| _gat_gtag_* | Google Analytics | Throttles the request rate to Google Analytics — limits data collection to one request per second. | 1 minute |
| _ga_* | Google Analytics 4 | GA4 session persistence cookie. Maintains session state across page loads in GA4 measurement. | 2 years |
| _shopify_sa_p | Shopify Analytics | Shopify's internal analytics — tracks page views and referral sources for the Shopify Admin analytics dashboard. | 30 minutes |
| _shopify_sa_t | Shopify Analytics | Works with _shopify_sa_p to attribute traffic sources in Shopify analytics. | 30 minutes |
| _shopify_y | Shopify Analytics | Persistent counterpart to Shopify's session analytics — links sessions across visits for the same user. | 1 year |
| _y | Shopify Analytics | Supports Shopify's analytics and reporting infrastructure. | 1 year |
Google Analytics and your data
Google Analytics processes data on servers in the United States. By consenting to analytics cookies, you consent to that transfer consistent with our cross-border disclosure in the Privacy Policy (APP 8). Google Analytics is configured with IP anonymisation enabled — your full IP address is not stored or shared.
You can opt out of Google Analytics across all websites at: tools.google.com/dlpage/gaoptout
5. Marketing and Advertising Cookies — Consent Required
Marketing cookies are placed by our advertising platform partners to build a profile of your interests and show you relevant advertisements on other websites and social media platforms. They track whether you have visited our website and what pages you viewed, and share this information with platforms such as Meta (Facebook/Instagram) and Google to enable targeted advertising.
These cookies are only placed with your explicit consent. Withholding consent for marketing cookies will not affect your ability to use this website or book Drip Haus services — it only prevents your visit data being used to show you targeted advertising.
AHPRA Compliance — Advertising Cookies
Drip Haus operates in a regulated health services advertising environment. Where marketing cookies are used to inform advertising campaigns, all resulting advertisements comply with AHPRA Advertising Guidelines and the Therapeutic Goods Advertising Code. We do not use retargeting data to serve advertisements containing therapeutic claims, specific product ingredient information, or clinical outcome claims.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta (Facebook/Instagram) | Meta Pixel — Identifies your browser to Meta for measuring ad effectiveness, building custom audiences, and serving retargeted ads on Facebook and Instagram. | 90 days |
| _fbc | Meta (Facebook/Instagram) | Meta Pixel — Records ad click data when you arrive from a Facebook or Instagram ad. Used to attribute conversions to specific ad campaigns. | 90 days |
| fr | Meta (Facebook/Instagram) | Facebook's primary advertising cookie — used to deliver, measure, and improve the relevance of Facebook advertisements. | 90 days |
| IDE | Google (DoubleClick) | Google's main advertising cookie — records and reports your actions after clicking a Google ad, to measure campaign effectiveness. | 13 months |
| _gcl_au | Google Ads | Google Ads conversion linker — connects ad click data to on-site actions (such as completing a booking enquiry) to measure ad conversions. | 90 days |
| NID | Used by Google to personalise advertisements and remember your preferences. | 6 months | |
| test_cookie | A test cookie used to verify your browser supports cookies before placing advertising cookies. Contains no personal data. | Session |
Data processing — Meta and Google advertising
Meta (Facebook) and Google process advertising cookie data on servers in the United States and other countries. By consenting to marketing cookies, you consent to that transfer consistent with our cross-border disclosure in the Privacy Policy (APP 8).
Manage your advertising preferences directly with these providers:
· Meta Ad Preferences — facebook.com/ads/preferences
· Google Ad Settings — adssettings.google.com
· Meta Privacy Policy — facebook.com/privacy/policy
· Google Privacy Policy — policies.google.com/privacy
6. Functional Cookies — Consent Required
Functional cookies enable enhanced website features that go beyond basic operation. They may be set by us or by third-party providers whose services are embedded on our pages. Without these cookies, some features may not work as intended — but the core website and booking functions remain available.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| acuity_* | Acuity Scheduling | Set by the Acuity Scheduling booking system. Remembers booking preferences, partially completed form data, and selected appointment times during a booking session. | Session / 30 days |
| ajs_anonymous_id | Segment (if active) | Anonymous visitor identifier used by analytics and marketing integrations to attribute behaviour across sessions without identifying the individual user. | 1 year |
| ghl_* | Go High Level | Set by the Go High Level CRM platform where embedded forms, chat widgets, or tracking scripts are present. Supports form pre-fill, lead tracking, and CRM integration. | Session / varies |
| cf_clearance | Cloudflare | Set by Cloudflare's bot detection system. Verifies that the browser is operated by a human, not an automated bot. Contains no personal data. | 30 minutes–24 hours |
| __stripe_* | Stripe | Set by the Stripe payment processing library where used. Helps Stripe detect and prevent payment fraud. Contains no payment card data. | 1 year |
| sq-* | Square | Set by the Square payment processing library where used. Supports payment session management and fraud prevention. | Session |
7. Managing Your Cookie Preferences
7.1 Cookie Consent Banner
On your first visit to driphaus.com.au, a cookie consent banner will appear. This banner lets you:
- Accept all — consents to essential, analytics, marketing, and functional cookies
- Reject all (non-essential) — consents to essential cookies only
- Manage preferences — opens a panel where you can toggle consent by category
Your preference is saved for 12 months via the cookieconsent cookie. After 12 months, the banner will reappear to renew your consent.
7.2 Changing Your Preferences After the First Visit
You can update your cookie preferences at any time via the Cookie Settings link in the website footer. Clicking this reopens the consent panel where you can adjust your settings by category. If you cannot find the link, contact us at admin@driphaus.com.au.
7.3 Opting Out via Browser Settings
Most browsers let you view, delete, and block cookies. Instructions for the most common browsers:
| Google Chrome | Settings → Privacy and security → Cookies and other site data |
| Mozilla Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Apple Safari (Mac) | Safari → Settings → Privacy → Manage Website Data |
| Apple Safari (iOS/iPadOS) | Settings → Safari → Privacy & Security → Block All Cookies |
| Microsoft Edge | Settings → Cookies and site permissions → Cookies and site data |
| Samsung Internet | Settings → Privacy and security → Cookies |
7.4 Opting Out of Specific Third-Party Tracking
- Google Analytics opt-out browser extension — prevents GA tracking across all websites
- Google Ads personalisation — adssettings.google.com
- Meta ad preferences — facebook.com/ads/preferences
- Your Online Choices — Australian advertising industry opt-out platform
- Network Advertising Initiative opt-out — optout.networkadvertising.org
Note: opting out through these platforms prevents personalised advertising but does not necessarily stop all data collection. Refer to each provider's privacy policy for the full scope of their data handling.
8. Do Not Track Signals
Some browsers allow you to send a "Do Not Track" (DNT) signal to websites you visit. There is currently no agreed Australian or international standard for how websites must respond to DNT signals, and our third-party analytics and advertising partners do not uniformly respect them.
We acknowledge DNT signals and, where our technology permits, will honour them by not placing non-essential cookies when a DNT signal is detected. However, we cannot guarantee that all third-party tracking is suppressed in response to a DNT signal. We recommend using the cookie consent banner and browser-level controls (Section 7) as the most reliable method of managing your tracking preferences on this site.
9. Cookies and the Australian Privacy Act 1988
Australia does not have a dedicated cookie consent law equivalent to the EU's ePrivacy Directive. However, the Privacy Act 1988 (Cth) and the Australian Privacy Principles impose obligations that apply directly to cookies and tracking technologies used on this site.
9.1 When Cookies Constitute Personal Information
Under the Privacy Act, a cookie constitutes personal information if it contains information about an identified individual, or an individual who is reasonably identifiable. Analytics and advertising cookies — particularly those linked to a Meta or Google account, or combined with other data we hold about you — can meet this threshold. Where they do, the following Australian Privacy Principles apply:
- APP 1 (Open and transparent management) — We must have a clearly expressed and up-to-date policy about how we handle personal information, including via cookies. This Cookie Policy satisfies that obligation.
- APP 3 (Collection of personal information) — We only collect personal information that is reasonably necessary for our functions. We do not collect more data via cookies than is needed for the stated purposes in this Policy.
- APP 5 (Notification of collection) — We must take reasonable steps to notify you of the collection at or before the time of collection. The cookie consent banner and this Cookie Policy satisfy that obligation.
- APP 8 (Cross-border disclosure) — Where cookies result in the transfer of personal information to overseas providers (Google, Meta), we disclose this and take reasonable contractual steps to protect that information. See Sections 4 and 5 of this Policy and Section 6.4 of the Privacy Policy.
- APP 11 (Security of personal information) — We take reasonable steps to protect data collected via cookies from misuse, interference, and unauthorised access.
9.2 The OAIC's Position on Cookies
The Office of the Australian Information Commissioner (OAIC) has confirmed that cookies and other online tracking tools can be personal information under the Privacy Act where they identify or can reasonably identify an individual. Drip Haus treats analytics and advertising cookies accordingly — as personal information requiring consent, disclosure, and appropriate handling — rather than taking a minimal-compliance approach.
10. Cookies in Our Emails
Emails sent by Drip Haus — through Go High Level (GHL) and SMTP2GO — may contain tracking pixels that record when an email has been opened and whether links within the email have been clicked. This is used to measure the effectiveness of our communications and improve future content.
Email open and click tracking constitutes collection of personal information under the Privacy Act. You may opt out of marketing emails at any time by clicking the Unsubscribe link in any email or by contacting admin@driphaus.com.au. Opting out of marketing emails also stops associated email tracking.
Transactional emails — appointment confirmations, clinical aftercare instructions, and invoices — may continue after unsubscribing from marketing, as these are essential to the delivery of our clinical service.
11. Third-Party Websites and Links
This website may contain links to third-party websites, including social media platforms, booking systems hosted externally, and partner websites. When you follow a link to a third-party website, that website's own cookie and privacy policies apply — not this Cookie Policy. We encourage you to review the privacy and cookie practices of any third-party site you visit.
Social media sharing buttons or embedded content (e.g. embedded Instagram posts or Facebook Like buttons) may set third-party cookies on your device even if you do not interact with them. These are governed by the relevant platform's policies.
12. Updates to This Cookie Policy
We may update this Cookie Policy from time to time — for example, when we add new technologies to the site, when our advertising platform arrangements change, or when Australian privacy law or OAIC guidance on cookies is updated. The version date at the top of this Policy will reflect any revisions.
Where changes are material — for example, if we add a new category of tracking or a new third-party advertising partner — we will update the cookie consent banner so that returning visitors are prompted to review and re-confirm their preferences.
13. Contact and Complaints
13.1 Cookie and Privacy Enquiries
If you have any questions about this Cookie Policy or how your data is handled in connection with tracking technologies, contact us at:
| admin@driphaus.com.au (subject: "Cookie Policy Enquiry") | |
| Phone | +61 440 139 440 |
| Website | driphaus.com.au |
| Post | Drip Haus Pty Ltd, 5/30 Ardross Street, Applecross WA 6153 |
13.2 Privacy Complaints
If you believe Drip Haus has not handled your personal information in accordance with the Australian Privacy Principles, email us at admin@driphaus.com.au. We will acknowledge within 2 business days and respond within 30 days.
If you are not satisfied with our response, you may escalate to the Office of the Australian Information Commissioner (OAIC):
| Website | oaic.gov.au |
| Phone | 1300 363 992 |
| Post | GPO Box 5218, Sydney NSW 2001 |
DRIP HAUS PTY LTD | CLINICAL LONGEVITY | CLINICAL LUXURY | Perth | Broome | South West WA | driphaus.com.au
DH-COMP-POL-022 · v1.0 · July 2026