Cookie Policy

Last updated: [Effective date]

This Cookie Policy explains how Med & Skin, operated by M&S Pharma Group Ltd (company number [Company number], registered office: Unit 2 Skylines Village, Limeharbour, London, England, E14 9TS), uses cookies and similar technologies on this website, what each of them does, and how you can control them.

It should be read together with our Privacy Policy, which explains how we handle your personal data more generally.

Cookies are small text files that a website stores on your device. They let the site recognise your browser and remember information between pages or between visits — for example that you are signed in, or which language you prefer.

Websites can also keep similar information in your browser’s local storage and session storage. These work like cookies but are never sent to our servers automatically. In this policy, «cookies» covers both.

Session cookies are deleted when you close your browser (or, for session storage, the tab). Persistent cookies stay on your device until they expire or until you delete them.

Strictly necessary

Required for the website to work: signing in to your account, keeping your basket, completing checkout securely and remembering your cookie choice. They do not need your consent and cannot be switched off on our side.

Preferences

Remember choices you make, such as your language or delivery country, so you do not have to make them again. They are only set when you make that choice.

Analytics

Would help us understand how the website is used so we can improve it. We do not use analytics cookies at present. If we introduce them, they will only be set after you have agreed to them, and we will list them in this policy first.

Marketing

Would be used to show you relevant advertising on other websites. We do not use marketing or advertising cookies and do not allow advertising networks to track you on our website. If this changes, these cookies will only be set with your consent.

All of the items below are set by our own website (first-party) and are not shared with anyone else.

Strictly necessary

• [Session cookie name] — cookie; until you close your browser, or [Remember me duration] if you tick «Remember me». Keeps you signed in and links your basket and orders to your account.
• [Security cookie name] — cookie; until you close your browser. Protects forms and checkout against forged requests.
• cookie-consent — local storage; until you clear your browser data. Records that you accepted the cookie notice, so it is not shown again.
• cookie-consent — session storage; until you close the tab. Records that you closed the cookie notice for this visit.
• event-registrations — session storage; until you close the tab. Remembers the event seats you reserved during this visit, so every page shows them.

Preferences

• NEXT_LOCALE — cookie; until you close your browser. Remembers the website language you chose when it differs from your browser’s language.
• ms-country — cookie; 12 months. Remembers the delivery country you selected.
• newsletter-popup — local storage; until you clear your browser data. Remembers that you subscribed, so the newsletter offer is not shown again.
• newsletter-popup — session storage; until you close the tab. Remembers that you declined the newsletter offer for this visit.
• training-video:position:<video> — local storage; until you finish the video or clear your browser data. Remembers where you stopped a training video, so you can resume it.

We do not currently allow third parties to place cookies through our website, with the following exceptions and notes:

• Payments are processed by [Payment provider name], which may set strictly necessary cookies during checkout to process your payment securely and prevent fraud. Its cookies are described in its own cookie policy: [Payment provider cookie policy URL].
• The pickup-point map loads map images from OpenStreetMap. Your browser shares your IP address with the OpenStreetMap Foundation so the images can be delivered; no cookies are set for this.
• Links to our Facebook, Instagram, YouTube and LinkedIn pages are plain links. These networks may set their own cookies once you visit them, under their own policies.

When you first visit, a notice explains how we use cookies. Selecting «Accept» records your choice, and the notice is not shown again. Closing it with ✕ hides it for the current visit only.

Strictly necessary and preference items work without consent because they are needed to provide the service you ask for. To reset your choice, clear the stored data for our website in your browser settings — the notice will appear again on your next visit.

Before we introduce any analytics or marketing cookies, the notice will let you accept or refuse each category separately, and you will be able to change your choice at any time. Withdrawing consent does not affect processing that took place before you withdrew it.

Every major browser (Chrome, Safari, Firefox, Edge) lets you see the cookies and site data stored on your device, delete them, and block them for all or for specific websites. You will usually find these options under Settings › Privacy or Settings › Cookies and site data.

If you block strictly necessary cookies, parts of the website will not work: you will not be able to sign in, keep items in your basket or complete an order.

We update this policy whenever we change the cookies we use or the way we use them. The date at the top shows when it was last revised. If we make a significant change, such as introducing analytics or marketing cookies, we will ask for your consent again through the cookie notice.

If you have any questions about this policy or about how we use cookies, contact us at:

[email protected]

or write to us at: M&S Pharma Group Ltd Unit 2 Skylines Village, Limeharbour, London, England, E14 9TS

You also have the right to complain to a data protection authority: the Information Commissioner’s Office (ICO) in the United Kingdom, or the authority in your country in the EU — the CNIL in France, the Data Protection Authority (APD/GBA) in Belgium, the Autoriteit Persoonsgegevens in the Netherlands or the CNPD in Luxembourg.