Cookie Policy
What cookies we use, and why.
This page lists every cookie this website sets. We currently use only strictly-necessary cookies — the kind needed to make your shopping cart and My DDO login work. We do not currently use any analytics or advertising/marketing cookies of any kind.
Strictly necessary — no consent required
Under UK cookie law (PECR), cookies that are strictly necessary to provide a service you've asked for — like remembering your cart, or keeping you signed in — don't require your consent, though we still tell you about them here. Every cookie below falls into this category: they are all first-party, all set only by this site (via our Wix integration), never by a third-party advertiser, and none of them are used to track you across other websites.
| Cookie name | Provider | Purpose | Lifetime |
|---|---|---|---|
| wix_visitor_access_token | First-party (this site, via Wix) | Keeps your shopping cart working as you browse | A few hours |
| wix_visitor_refresh_token | First-party (this site, via Wix) | Renews your cart session without asking you to start over | Until it expires or you clear cookies |
| wix_visitor_expires_at | First-party | Records when the above needs renewing | Same as above |
| wix_member_access_token | First-party (this site, via Wix) | Keeps you signed in to My DDO | A few hours, renewed automatically while active |
| wix_member_refresh_token | First-party (this site, via Wix) | Keeps you signed in without asking you to log in again every visit | Up to 30 days |
| wix_member_expires_at | First-party | Records when the above needs renewing | Same as above |
| wix_oauth_state / wix_oauth_code_verifier / wix_oauth_next | First-party | Security values used only during the few seconds of a login attempt, to prevent it being intercepted or forged | 10 minutes, or until your login completes — whichever is first |
All of the above are set with the HttpOnly, Secure and SameSite=Laxsecurity flags, meaning they can't be read by page scripts and are only ever sent over an encrypted connection.
Analytics — not currently used
We do not currently run Google Analytics, or any other analytics tool, on this website. If an older page or document mentions Google Analytics, that's out of date and has been corrected here. If we add a privacy-respecting, statistics-only analytics tool in the future, current UK rules (as updated by the Data (Use and Access) Act 2025) may allow this without asking for your consent first, provided it is used solely to gather aggregate usage statistics — never for advertising, profiling, or tracking you across other sites — and a clear way to opt out is always available. If we ever use analytics for advertising or cross-site tracking instead, we will ask for your consent first. This page will be updated before any such tool is added, not after.
Marketing / advertising — not currently used
We do not currently run Facebook/Meta advertising pixels, Instagram remarketing, or any other advertising/tracking technology on this website. If an older page or document mentions these, that's out of date and has been corrected here. Advertising and remarketing cookies always require your consent under UK law — if we ever add one, we will ask for your permission first, with a real way to accept, reject, or change your mind at any time.
Preference cookies — not currently used
We do not currently store any preference (e.g. dismissed-notice) data in your browser. Our homepage competition popup, for example, does not remember that you closed it — it will show again the next time you load the page, by design.
Third-party embeds
Our homepage shows your public Google reviews, fetched by our own server directly from Google's Places API — this does not set any cookie or storage technology on your device, and no personal data of yours is sent to Google as part of it.
Do we need a cookie banner?
Because every cookie on this site today is strictly necessary, we don't currently show a cookie-consent banner — one isn't required by law for strictly-necessary cookies alone. If that ever changes (for example, if we add advertising or non-exempt analytics), we will add a proper consent banner with real accept/reject/manage options before those cookies are ever set — not describe one that doesn't exist, which the previous version of this page did.
Managing cookies yourself
You can control or delete cookies at any time through your browser's own settings. Blocking the strictly-necessary cookies listed above will likely stop your cart or My DDO login from working correctly.
Questions
Email contact@digitaldoctorsonline.com if you have any questions about this policy.