Legal
Cookie notice
This site sets three kinds of cookie, all of them necessary to sign you in and keep your session. There is no advertising cookie, no analytics tracker and no third-party script watching you read — which is also why there is no consent banner to dismiss.
Draft — not yet in effect
This document is prepared but has not been reviewed by a legal adviser or adopted by GenX Clinics. It does not yet govern any order. The effective date appears here once it does.
What a cookie is here
A small piece of text your browser stores for a site and sends back on the next request.
Without one, a website cannot tell that the person requesting the second page is the person who signed in on the first. That is the entire job the cookies below do. None of them records what you looked at, and none of them is readable by another website.
Every cookie we set
The complete list, not an example list.
- sb-… (several)
- Your signed-in session, set by our authentication provider. They are what keep you signed in between pages. HTTP-only, so no script on the page can read them. They last until the session expires or you sign out.
- gx-pending-email
- Holds the address you asked a sign-in code to be sent to, for the fifteen minutes between requesting the code and entering it. It exists so the address does not have to travel in the page URL, where it would end up in browser history and server logs. HTTP-only.
- gx-act-as
- Only ever set for a member of staff who is assisting inside a patient's account, and only alongside their own authenticated session. It expires after thirty minutes. Patients never receive this cookie.
Controlling them
You are free to block or delete them; be aware of what that costs.
Every browser lets you clear cookies for a site or block them entirely. Blocking ours means you cannot stay signed in, cannot keep a cart, and cannot complete an order — not as a penalty, but because there is no other way for the site to recognise you between one page and the next. Reading the catalogue and the research writing works perfectly well with cookies blocked.
Related
What we do with the information behind your account is described in the privacy notice, and the terms on which we supply are in the terms of supply.