The short version
- Cookies are small files stored on your device that help a website work and remember things.
- We use a small number of cookies and similar technologies, mainly to make our website work and to provide our enquiry form.
- We do not use cookies to sell your information.
- We do not currently use advertising, remarketing or cross-site tracking cookies.
- Some cookies are set by third-party services we use, including Zoho and, where enabled, Abacus AI.
- You can control or delete cookies through your browser settings at any time.
- Where consent is required for non-essential cookies, we will ask for it before setting them.
- You can change your cookie preferences at any time through the Cookie settings link.
1. About this Cookie Notice
This Cookie Notice explains how Heart Safe Wellness uses cookies and similar technologies on our website at:
www.heartsafewellness.au
Heart Safe Wellness is a business of:
Heart Safe Australia Pty Ltd
ABN 22 642 092 993
We are based in Sydney's Northern Beaches, New South Wales.
In this Notice, “we”, “us” and “our” means Heart Safe Australia Pty Ltd trading as Heart Safe Wellness.
This Notice covers cookies and similar technologies, including:
- cookies;
- pixels;
- local storage;
- session storage;
- web beacons; and
- tags or scripts that collect information about how a website or embedded feature is used.
This Notice should be read with our:
- Privacy Policy;
- Website Terms of Use; and
- any cookie banner or preference settings displayed on our website.
Our Privacy Policy explains how we collect, use, disclose and protect personal information, including information that may be collected through cookies and similar technologies.
For questions about this Notice, contact us at:
Email: [email protected]
Phone: 1300 728 354
2. What cookies are
Cookies are small text files placed on your computer, phone or tablet when you visit a website.
Cookies may allow a website to:
- recognise a device;
- remember preferences;
- keep a form or session working;
- protect forms against spam or misuse;
- understand how the website is used; and
- provide embedded features.
Some cookies are session cookies. These are deleted when you close your browser.
Other cookies are persistent cookies. These remain on your device for a set period or until you delete them.
This Notice also applies to similar technologies, such as pixels, local storage, session storage, web beacons and tags. These technologies may collect information in a similar way to cookies, even if they do not store a traditional cookie file.
3. What cookies we use
The exact cookies used on our website may change as the website, forms and third-party services change.
The following table describes the categories of cookies and similar technologies that may be used.
| Cookie type | What it does | Set by | Can you decline it? |
|---|---|---|---|
| Strictly necessary or essential | Helps the website load, operate securely and provide core features such as navigation, security and basic functionality. | Heart Safe Wellness, our website platform and essential service providers. | These cannot be switched off through the cookie banner because the website may not work without them. They can still be blocked through browser settings, although parts of the website may stop working. |
| Functional or preference | Remembers choices and enables embedded features, including the Zoho enquiry form. | Heart Safe Wellness and service providers, including Zoho. | Yes. If declined, the enquiry form or other embedded features may not load or work correctly. |
| Performance and analytics | Measures how visitors use the site — pages viewed, time on page, approximate location and device type — so we can understand what works and improve the site. We use Google Analytics 4 (GA4). Google Analytics is only activated after you give consent. We do not use it to identify you personally, and we have advertising and personalisation features switched off. | Google LLC (via our website) | Yes. It is only set after you consent in the cookie banner. |
| Chat and support | Supports a website chat or assistant feature, if enabled. The provider may use cookies or local storage to deliver the feature or remember a conversation. | Abacus AI, if the chat feature is enabled. The chat feature is not currently enabled on our website. | Yes. The chat or assistant feature may not work if these technologies are declined. |
| Advertising and social media | Used for advertising, remarketing or cross-site tracking. | We do not currently use these cookies. We confirm we do not use the Meta Pixel or any other advertising, remarketing or cross-site tracking cookie. If this changes, this notice will be updated and your consent sought first. | Not currently applicable. If this changes, we will update this Notice and seek consent where required. |
Strictly necessary or essential
What it does
Helps the website load, operate securely and provide core features such as navigation, security and basic functionality.
Set by
Heart Safe Wellness, our website platform and essential service providers.
Can you decline it?
These cannot be switched off through the cookie banner because the website may not work without them. They can still be blocked through browser settings, although parts of the website may stop working.
Functional or preference
What it does
Remembers choices and enables embedded features, including the Zoho enquiry form.
Set by
Heart Safe Wellness and service providers, including Zoho.
Can you decline it?
Yes. If declined, the enquiry form or other embedded features may not load or work correctly.
Performance and analytics
What it does
Measures how visitors use the site — pages viewed, time on page, approximate location and device type — so we can understand what works and improve the site. We use Google Analytics 4 (GA4). Google Analytics is only activated after you give consent. We do not use it to identify you personally, and we have advertising and personalisation features switched off.
Set by
Google LLC (via our website)
Can you decline it?
Yes. It is only set after you consent in the cookie banner.
Chat and support
What it does
Supports a website chat or assistant feature, if enabled. The provider may use cookies or local storage to deliver the feature or remember a conversation.
Set by
Abacus AI, if the chat feature is enabled. The chat feature is not currently enabled on our website.
Can you decline it?
Yes. The chat or assistant feature may not work if these technologies are declined.
Advertising and social media
What it does
Used for advertising, remarketing or cross-site tracking.
Set by
We do not currently use these cookies. We confirm we do not use the Meta Pixel or any other advertising, remarketing or cross-site tracking cookie. If this changes, this notice will be updated and your consent sought first.
Can you decline it?
Not currently applicable. If this changes, we will update this Notice and seek consent where required.
4. Cookie details
The following is our current working list based on the website configuration known to us as at 5 October 2026.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| __Host-authjs.csrf-token, __Secure-authjs.callback-url, hsw-cookie-consent (local storage) | Website platform / Abacus AI | Website operation, security, navigation and core functionality, and remembering your cookie choices. | Essential | Session (cookie consent choice: until you change it or clear your browser storage) |
| __Secure-authjs.session-token (only set if you sign in to an account) | Website platform / Abacus AI | Maintains a visitor session and supports website functionality. | Essential | 30 days, or until you sign out |
| zalb_<id> (for example zalb_3620cf69d6) | Zoho Forms | Delivers the enquiry form and supports form security, verification and CAPTCHA or spam protection. | Functional / essential to the form | Session |
| None — the chat feature is not currently enabled | Abacus AI | Provides the chat or assistant feature, if enabled, and may store session information or conversation preferences. | Functional / chat | Not applicable |
| _ga | Distinguish users. | Performance / analytics | Up to 2 years | |
| _ga_<container-id> | Maintain GA4 session state. | Performance / analytics | Up to 2 years | |
| _gid | Distinguish users. | Performance / analytics | 24 hours |
__Host-authjs.csrf-token, __Secure-authjs.callback-url, hsw-cookie-consent (local storage)
Provider
Website platform / Abacus AI
Purpose
Website operation, security, navigation and core functionality, and remembering your cookie choices.
Type
Essential
Duration
Session (cookie consent choice: until you change it or clear your browser storage)
__Secure-authjs.session-token (only set if you sign in to an account)
Provider
Website platform / Abacus AI
Purpose
Maintains a visitor session and supports website functionality.
Type
Essential
Duration
30 days, or until you sign out
zalb_<id> (for example zalb_3620cf69d6)
Provider
Zoho Forms
Purpose
Delivers the enquiry form and supports form security, verification and CAPTCHA or spam protection.
Type
Functional / essential to the form
Duration
Session
None — the chat feature is not currently enabled
Provider
Abacus AI
Purpose
Provides the chat or assistant feature, if enabled, and may store session information or conversation preferences.
Type
Functional / chat
Duration
Not applicable
_ga
Provider
Purpose
Distinguish users.
Type
Performance / analytics
Duration
Up to 2 years
_ga_<container-id>
Provider
Purpose
Maintain GA4 session state.
Type
Performance / analytics
Duration
Up to 2 years
_gid
Provider
Purpose
Distinguish users.
Type
Performance / analytics
Duration
24 hours
5. Third-party cookies and services
Some cookies and similar technologies may be set by third-party services that appear on or support our website.
These may include:
Zoho Forms
We use Zoho Forms for our website enquiry form.
When the form loads or is used, Zoho may set cookies or use similar technologies for:
- delivering the form;
- verifying form submissions;
- CAPTCHA or spam protection;
- maintaining form functionality; and
- protecting the form against misuse.
Zoho may process information outside Australia. Further information is included in our Privacy Policy.
Abacus AI
Abacus AI hosts or supports our website and may provide a chat or assistant feature.
If the chat feature is enabled, Abacus AI may use cookies, local storage or session storage to:
- deliver the chat feature;
- maintain a chat session;
- remember a visitor's interaction; or
- store conversation information.
The chat feature is not currently enabled on our website.
We use Google Analytics 4 to collect usage and analytics information about how visitors use our website. Google may process this information on servers outside Australia.
Google's own privacy and cookie information governs how it collects and processes data. We have configured Google Analytics so that advertising personalisation and data sharing for advertising purposes are disabled.
We do not sell personal information. We do not currently permit third parties to use cookies on our website for their own advertising, remarketing or cross-site tracking.
6. Your cookie choices
6.1 Cookie banner
On your first visit, our cookie banner should explain that we use cookies and similar technologies.
The banner should provide:
- Accept all;
- Decline non-essential; and
- Manage preferences.
Essential cookies may be active because they are needed for the website to operate. Non-essential cookies should not be set before consent is obtained where consent is required.
Declining non-essential cookies should not prevent you from browsing the website. However, some features, such as the enquiry form or chat feature, may not work properly.
You should be able to change your choices at any time through a Cookie settings link in the website footer or another clearly visible location.
6.2 Browser settings
You can usually view, delete, block or restrict cookies through your browser settings.
Common browser controls include:
- Google Chrome: Settings → Privacy and security → Third-party cookies;
- Apple Safari: Settings or Preferences → Privacy;
- Mozilla Firefox: Settings → Privacy & Security;
- Microsoft Edge: Settings → Cookies and site permissions; and
- Mobile browsers: the privacy or website settings available through your device.
The exact steps may vary depending on your browser version.
Blocking all cookies may affect website functionality. For example, the enquiry form, chat feature or other embedded services may not work.
6.3 Device-level settings
Some phones and tablets also provide device-level privacy settings, such as:
- limiting ad tracking;
- restricting app tracking;
- resetting advertising identifiers; or
- limiting cross-site tracking.
These settings may reduce tracking but may not block all cookies or other technologies used by a website.
6.4 Do Not Track
Unless otherwise stated here, we do not currently represent that the website responds to all browser “Do Not Track” signals.
This position will be reviewed if the website begins using analytics, advertising or cross-site tracking technologies.
7. Consent and withdrawing consent
For non-essential cookies, we rely on consent where required.
Consent in this context means that:
- you are told what non-essential cookies do;
- you are given a genuine choice;
- you can decline non-essential cookies without being prevented from browsing the website;
- consent is not bundled into an unrelated action; and
- you can withdraw consent as easily as you gave it.
You may withdraw consent at any time by:
- changing your settings through the Cookie settings link;
- deleting cookies through your browser; or
- blocking cookies through your browser or device settings.
Withdrawing consent does not affect the lawfulness of anything we did before consent was withdrawn.
Essential cookies do not generally require consent because they are necessary for the website to operate or for a feature requested by you to function.
Where cookies or similar technologies collect personal information, our handling of that information is also governed by the Privacy Act 1988 (Cth), the Australian Privacy Principles and our Privacy Policy.
8. Cookies and personal information
Information collected through cookies or similar technologies may be personal information.
Examples may include:
- an IP address;
- a device identifier;
- browser or device information;
- pages visited;
- approximate location;
- session information; or
- information connected with a form or chat interaction.
Analytics information collected by Google Analytics may be stored outside Australia (including in the United States). This is a cross-border disclosure covered by the cross-border disclosure section of our Privacy Policy.
Our Privacy Policy explains:
- what personal information we collect;
- why we collect it;
- how we use and disclose it;
- the providers that may receive it;
- cross-border disclosures and overseas data storage;
- how we protect and retain it; and
- how you can request access to or correction of it.
You can read our Privacy Policy.
We do not use cookies to collect health information through the website.
Please do not submit health or medical information through the website enquiry form. Health information is collected separately through our Participant Waiver & Medical Declaration process.
9. Cookies set by embedded content
When you interact with an embedded feature, such as the Zoho enquiry form, that service may set its own cookies or use similar technologies.
The embedded provider may process information entered into the feature. Information submitted through the enquiry form is handled under our Privacy Policy.
The enquiry form should only be used for genuine enquiries about our services. Please do not use it to submit:
- medical history;
- diagnoses;
- medication information;
- pregnancy information;
- mental health information; or
- other sensitive health information.
That information is collected through a separate participant health-screening and waiver process.
10. Cookies, communications and the Spam Act
Cookies are separate from our email and other electronic communications.
Where we send marketing or subscription communications, including our “Healthy Mind + Body + Spirit” communications, we handle those communications in accordance with the Spam Act 2003 (Cth), our Privacy Policy and applicable consent requirements.
Marketing communications include a functional unsubscribe facility.
Cookie preferences do not automatically unsubscribe you from marketing communications. To stop marketing emails, use the unsubscribe link in the relevant message or contact us at hello@heartsafewellness.au.
11. Changes to this Notice
We may update this Notice when:
- our website changes;
- we add or remove a third-party service;
- our cookie settings change;
- we introduce analytics or advertising technologies;
- privacy law or regulatory guidance changes; or
- we change how we use cookies or similar technologies.
We will publish the revised Notice on our website with a new “Last updated” date.
If a material change affects consent, we will bring it to visitors' attention through the cookie banner or another appropriate notice.
12. Contact us
If you have a question about this Notice or our use of cookies, contact:
Heart Safe Australia Pty Ltd trading as Heart Safe Wellness
ABN: 22 642 092 993
Location: Sydney Northern Beaches, NSW, Australia
Phone: 1300 728 354
Email: [email protected]
Website: www.heartsafewellness.au
We will consider and respond to questions or privacy-related requests within a reasonable time.