Cookie policy

Last updated: 4 September 2026

This page explains what is stored on your device when you use therapiummed.com, what needs your permission, and how to control it. Our Privacy policy covers everything else we do with personal data.

1. What a cookie is

1. A cookie is a small text file that a website asks your browser to store on your device, and can read back the next time you visit. It is how a site remembers that the thing in your basket is yours.
2. This page uses "cookie" as shorthand for cookies and for anything else that stores information on your device or reads information from it — local storage, session storage, pixels, tags and device identifiers. The rules are the same for all of them, and so is our approach.
3. A session cookie is deleted when you close your browser. A persistent cookie stays until it expires or you delete it.
4. A first-party cookie is set by the site you are on. A third-party cookie is set by somebody else through that site — usually an advertising or analytics company.

2. The rule about consent

1. Under Article 5(3) of the ePrivacy Directive (2002/58/EC), as implemented in each EU country, and under the UK Privacy and Electronic Communications Regulations, a website may store information on your device or read information from it only with your consent.
2. There is one exception, and it is narrow: no consent is needed where the storage is strictly necessary to provide the service you have actually asked for. Remembering your basket while you shop is strictly necessary. Measuring how many people visited the site is not.
3. Consent has to be a real choice. It must be freely given, specific, informed and unambiguous, and it must be an active step you take. Continuing to browse is not consent. Scrolling is not consent. A pre-ticked box is not consent. Silence is not consent.
4. Refusing must be as easy as accepting, and withdrawing must be as easy as giving.
5. Until you consent, only strictly necessary cookies may be set. That is the rule, and section 3 is our honest account of how we currently stand against it.

3. What this shop actually does today

Most cookie policies describe an ideal. This one describes the site as it is, because a policy that describes a mechanism you cannot find is worse than no policy at all.

1. We use no advertising cookies and no third-party marketing cookies. None. Not one. There is no advertising pixel on this site, no remarketing tag, no social media tracker, no data broker and no ad network. We do not sell your data and we do not share it with anyone for their advertising.
2. We use no third-party analytics. There is no Google Analytics, no session recorder, no heatmap tool and no A/B testing platform.
3. The site sets strictly necessary cookies. Your basket, your session, your login if you have an account, and the country and language you are browsing in. These do not need your consent and you cannot use the shop without them.
4. The shop runs on Shopify, and Shopify's own commerce analytics can set analytics cookies. These measure how the shop is used in aggregate — pages viewed, where visitors arrived from, where a checkout was abandoned. They are first-party, they are not shared with advertisers, and they are not used to build a profile of you. But they are not strictly necessary, so under section 2 they require your consent.
5. There is currently no consent banner on this site. We are telling you that plainly rather than describing a button that is not there. Until a consent mechanism is in place we are not in a position to claim that we obtain your consent before a non-essential cookie is set, and we are not going to claim it.
6. What that means for you right now. The only non-essential cookies in play are Shopify's own analytics cookies described in clause 3.4. If you would rather they were not set, section 7 explains the browser controls that will block them today, and they work whether or not this site has a banner.
7. What we are doing about it. A consent mechanism with a genuine reject option will be in place before this shop opens to the public, and this page will be updated on the day it is. Nothing in clauses 3.1 and 3.2 will change: whatever else we add, this site is not going to start carrying advertising trackers.

4. The categories, and which ones we use

Category	What it does	Consent needed?	How long it lasts	Used on this site?
Strictly necessary	Makes the shop work. Keeps your basket, holds your session together between pages, keeps you logged in if you have an account, applies the country and currency of the market you are shopping in, protects the checkout against fraud, and balances traffic across servers.	No. Without these there is no shop, and the exception in clause 2.2 covers them.	Mostly session cookies, deleted when you close the browser. A few are persistent so your basket survives you closing the tab, and are measured in days or weeks rather than years.	Yes.
Functional	Remembers a preference you expressed so you do not have to express it again — your language, your country, the fact that you dismissed a notice, and the record of the cookie choice you made.	Yes, except the record of your own cookie choice, which we have to store in order to honour it.	Persistent. Up to 13 months, which is also how often we will ask you again.	Yes — language and country. This is the smallest possible use of this category.
Analytics	Counts visits and measures how the shop is used in aggregate: which pages are read, which are ignored, where people arrive from, where a checkout is abandoned. Used to fix the shop, not to identify you.	Yes. Analytics is never strictly necessary, however useful it is to us.	Persistent. Typically up to one year for the identifier that distinguishes one visitor from another, and minutes for the one that groups a single visit together.	Yes — Shopify's own, first-party only. See clauses 3.4 and 3.5, which are honest about the consent position.
Marketing and advertising	Follows you across websites to build an interest profile, target advertising at you, and measure whether an advert worked. Almost always set by third parties.	Yes, and it is the category where consent matters most.	Persistent, often for a year or more.	No. We use none of these at all.

1. The exact name, provider and expiry of each individual cookie set by the Shopify platform are determined by Shopify, and Shopify changes them from time to time. We would rather give you accurate categories and durations than a list of cookie names that goes stale without anybody noticing. If you want the precise current list for your own browser, your browser's developer tools will show you every cookie this site has set, with its expiry — or ask us and we will send you Shopify's current published list.
2. We will not set a non-essential cookie with a lifetime longer than 13 months, and we will ask for your consent again at least that often rather than treating a decision you made two years ago as still current.

5. Cookies set by other people

1. Payment: when you pay, your payment provider may set cookies of its own to complete and secure the transaction. Those are strictly necessary to the payment you asked for.
2. Embedded content: if we ever embed a video or a map from another site, that provider can set its own cookies. We do not embed any third-party content today.
3. Nobody else sets a cookie through this site. There is no advertising network, no analytics vendor and no social plugin.

6. Changing or withdrawing your choice

1. Once a consent mechanism is in place, you will be able to change your choice at any time from a link in the footer, and withdrawing will take exactly as many clicks as giving. This clause will be updated with the exact wording of that link on the day it goes live.
2. Until then, the browser controls in section 7 are the effective way to refuse a non-essential cookie on this site, and they work now.
3. Withdrawing consent does not undo what was already collected, but it stops anything further. If you want data already collected about your visits deleted as well, email office@therapiummed.com — that is the erasure right in section 10 of our Privacy policy, and it applies here too.
4. Refusing or withdrawing has no effect on your order, your delivery, your price, your statutory rights or our 60-day guarantee. It never will.

7. Controlling cookies in your browser

1. Every major browser lets you see the cookies a site has set, delete them, block cookies from a particular site, block third-party cookies entirely, or clear everything when you close the window. Look for "Cookies and site data" or "Privacy" in your browser's settings.
2. Private or incognito mode discards cookies at the end of the session, which is a quick way to browse without leaving anything behind.
3. Deleting cookies also deletes the record of any choice you made here, so you will be asked again.
4. If you block strictly necessary cookies, parts of the shop will stop working — most obviously the basket and the checkout. That is not us penalising you for the choice; the basket is literally made of a cookie.

8. Browser signals

1. Some browsers send a Global Privacy Control signal or a Do Not Track header on your behalf.
2. Under several US state privacy laws, a Global Privacy Control signal must be treated as an opt-out request. Shopify handles that for this shop, and our Your privacy choices page explains how.
3. In the United Kingdom and the European Union these signals are not currently recognised as a substitute for consent, so a site is not obliged to treat one as an answer. In our case it makes little practical difference, because we set no advertising cookies for such a signal to switch off.

9. Cookies and your personal data

1. Some cookie data is personal data — an identifier that distinguishes your browser from another is personal data even if it does not carry your name.
2. Everything in our Privacy policy therefore applies to it: the lawful bases in section 5, the retention rules in section 9, and all the rights in section 10, including access and erasure.
3. Where the ePrivacy rules require consent for storing something on your device, we treat that consent as the lawful basis for the processing that follows from it, and withdrawing it ends both.

10. Changes to this policy

1. We will update this page whenever the answer to "what does this site actually set" changes — a new tool, a new category, or the consent mechanism in clause 3.7 going live.
2. The date at the top tells you when it last changed.
3. If we ever introduce a category we do not use today, we will ask for your consent before setting anything, not afterwards.

11. Questions

1. Email office@therapiummed.com. Ask us what a particular cookie does and we will tell you.
2. Our full data protection contact details, including the position on our EU representative, are in section 1 of our Privacy policy.
3. If you are not satisfied with our answer, section 13 of the Privacy policy explains which regulator you can go to.