Our approach
Baudelaire uses the smallest set of cookies that lets the site and the patient portal work correctly. We do not run advertising, retargeting, or third-party tracking. Our analytics provider (Plausible Analytics) is cookieless by design. Because we use only strictly-necessary cookies, under UK and EU law we are not required to show a consent banner, and we choose not to.
What we use, and why
| Cookie | Purpose | Duration |
|---|---|---|
| sb-access-token (Supabase) | Keeps you signed in to the patient portal. | 1 hour (rotated) |
| sb-refresh-token (Supabase) | Renews your session silently so you are not signed out unexpectedly. | 30 days (rotated) |
| CSRF-token | Protects form submissions from cross-site request forgery. | Session |
All cookies are set with Secure, HttpOnly andSameSite=Lax attributes where appropriate. They are scoped to .baudelaireclinic.com and its subdomains.
What we do not use
- Google Analytics or any other cookie-based analytics.
- Facebook Pixel, TikTok Pixel, or any advertising-platform cookies.
- Retargeting cookies from ad networks.
- Third-party social-media embed cookies without explicit action.
Third-party services
Booking is handled by our own patient portal, with no third-party widget and no cross-domain cookies. When you pay a deposit or balance, you are taken to Stripe’s secure checkout on stripe.com, which sets its own cookies there to process the payment. Those cookies belong to Stripe and are governed by Stripe’s privacy notice, not this one.
Managing cookies
You can clear or block cookies through your browser settings at any time. Blocking the strictly-necessary cookies will stop you signing in to the portal, but it will not otherwise prevent you from reading the site.
Questions
Write to support@baudelaireclinics.co.uk. For more on how we handle personal data, see our privacy policy.