Cookie Policy

Last updated: 4 August 2026

HEIS Milano operates at the intersection of tradition and contemporary rigour. This philosophy extends to our digital environment. We respect your privacy and limit data collection to what is essential.

This Cookie Policy describes the cookies and similar technologies used on heismilano.com, operated by HEIS MILANO di Filipe Abrahao, with registered office in Piazza della Repubblica 19, 20124 Milan (MI), Italy, VAT: 05620550284, contact privacy@heismilano.com. It should be read together with our Privacy Policy.

1. Cookies

Cookies are small text files that websites store on a user's device during browsing. They allow the site to function, remember preferences and, in some cases, measure how the site is used.

Alongside cookies, this site may use similar technologies such as tracking pixels and browser local storage. In this document, the term "cookies" also refers to these technologies.

2. Our approach

HEIS uses three categories of technology, of which only one is active by default. We do not use profiling cookies and we do not participate in cross-site advertising tracking.

No non-essential technology is installed before you give consent. Consent is collected through our banner, is granular, and may be withdrawn at any moment with the same ease. Declining has no effect on your ability to browse or purchase.

2.1. Essential architecture

Always active, no consent required.

These technologies are necessary for platform functionality, security protocols and the checkout process. The same category stores your language and currency selection, and the record of your cookie choices. They cannot be disabled, as the Services could not be provided without them. Legal basis: Art. 122(1) of Italian Legislative Decree 196/2003.

The _session_id cookie allows Shopify to store session information, for the duration of the session.

The cart, cart_sig and cart_ts cookies store the contents of your shopping bag, for two weeks.

The _secure_session_id cookie ensures secure browsing during checkout, for twenty-four hours.

The storefront_digest cookie verifies access credentials for restricted areas, for two years.

The _tracking_consent cookie stores your cookie preferences, for one year. The _cmp_a cookie serves the same purpose, for one day.

The keep_alive and localization cookies maintain session persistence and regional continuity, for thirty minutes and two weeks respectively.

The secure_customer_sig cookie keeps you signed in to your account. It is set by Shopify, has a maximum duration of twenty years, and is cleared when you sign out.

System logs. For operation, maintenance and security purposes, the Services record technical interaction data, including IP address, timestamp and server response. These logs are not set through cookies and are retained for the period necessary to the purpose. They are not used to profile you.

These cookies are set by Shopify International Ltd. (Ireland), acting as our processor for the operation of the platform.

2.2. Internal analytics

Optional, inactive by default.

Aggregated data used exclusively by HEIS to understand our digital performance and refine the Platform environment and our menswear offering. Not used to identify you personally. Legal basis: your consent.

The _ga cookie distinguishes users, for two years.

The _ga_<CONTAINER-ID> cookie maintains session state, for two years.

Google Analytics 4 configuration. Analytics data is processed by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as our processor, with possible onward transfer to Google LLC in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework, subject to the European Commission adequacy decision of 10 July 2023, and on Standard Contractual Clauses.

Our property is configured as follows.

Consent Mode v2 is enabled. Without your consent no analytics cookie is installed and no data is transmitted to Google.

IP addresses are used by Google Analytics 4 to derive approximate geographic information, and are not stored.

Data retention is set to fourteen months.

Google Signals and advertising features are disabled.

Ad personalisation and data sharing with other Google products are disabled.

Benchmarking and modelling contributions are disabled in our account settings.

Measurement IDs: G-4JEXWSK9SK and G-8SN4PFNEFW. Two measurement identifiers are currently active as a result of parallel implementations on the platform. Both are analytics-only, both are governed by the configuration described above, and neither is installed before consent.

2.3. Optional Communications

Used exclusively to measure the effectiveness of our direct brand updates, for example whether a message has been opened or a link followed. This category relies on tracking pixels embedded in our emails, with a maximum retention of 24 months. It does not enable advertising cookies and involves no sharing with retargeting networks. Legal basis: your consent.

3. Technologies in use

The categories above describe the technologies active at the date of this Policy. Cookie names, domains and durations are determined by our providers and may change when they update their platforms or when we modify the site.

The Cookie settings panel, accessible from the footer of every page, always reflects the technologies actually present on your device, category by category, with their current duration. Where a discrepancy appears between this Policy and that panel, the panel prevails, and we ask you to report it to privacy@heismilano.com so that we may correct this document.

4. Managing your preferences

You may review, modify or withdraw your choices at any time through the Data preferences link in the site footer.

Most browsers also allow cookie control through their settings: Google Chrome, Apple Safari, Mozilla Firefox, Microsoft Edge. Blocking essential cookies at browser level may prevent checkout from functioning.

You may also install the Google Analytics Opt-out Browser Add-on.