Cookie Policy

What cookies are

Cookies are small text files placed on your device when you visit a website. They help the site function, remember your preferences, and understand how the site is used.

This policy also covers similar technologies that store information on your device or read information from it, such as local storage. Where we say “cookies” below, we mean all of these.

Your choice

When you first visit the site we ask whether you accept optional cookies. Nothing optional is stored on your device until you choose. Rejecting is as easy as accepting, and you can change your mind at any time using the “Cookie settings” link in the footer of every page.

We record your choice in a cookie called cc_cookie so we do not have to ask again. It lasts six months. If our cookie inventory changes we will ask you again.

Strictly necessary cookies

These are required for the site and your secure patient account to work, so they cannot be switched off.

• __session and __client_uat, set by our identity provider Clerk — these sign you in and keep the patient portal protected.
• cc_cookie, set by us — remembers the cookie choices you make.

Functionality cookies

These remember choices you make so the site matches them. We currently use one:

• np_audience, set by us — stores only “trt” or “hrt” so navigation and content match the programme you chose. It contains no personal information and expires after one year.

Analytics cookies

These help us understand how the site is used so we can improve it. They are only set if you agree, and you can withdraw that agreement at any time.

We use PostHog, hosted in the European Union and served through our own domain. PostHog sets ph_…_posthog to recognise your browser between visits, and stores the same information in your browser’s local storage.

Because this is a healthcare site we restrict analytics further than we are required to. Session recording is switched off entirely, so no recording of your screen is ever made. Analytics are fully suspended on the eligibility questionnaire and on every page of the patient portal that shows your health information — your results, prescriptions, appointments, subscription and billing pages. Where you are signed in, we identify you to PostHog only by a meaningless account reference, never by your name or email address.

Advertising and tracking

We do not use advertising or tracking technologies on this site. There is no advertising pixel, tag manager or conversion tracking of any kind. If that changes, we will update this policy and ask for your consent before any such technology is used.

Other services your browser contacts

Some parts of the site load from other services, which will receive your device’s IP address as part of that request:

• Clerk, our identity provider, which supplies the sign-in and account software.
• Amazon Web Services, which hosts the site and its images.
• Stripe, if you make a payment. Payments are taken on Stripe’s own pages, so any cookies Stripe sets are covered by Stripe’s cookie policy, not this one. We never see or store your card details.

The fonts used on this site are served from our own servers, so no font provider is contacted when you visit.

Managing cookies in your browser

As well as our cookie settings, you can control cookies through your browser settings, though blocking some cookies may affect how the site works.

Changes to this policy

We may update this policy and will post the revised version here with a new ‘last updated’ date.