Legal
Cookie Policy
We ask before loading optional Google Analytics or Microsoft Advertising tracking. You can allow analytics only, accept both, or reject both. Use Cookie settings in the footer to change your choice.
What cookies are
"Cookies" is a general term for small pieces of data a website saves in your browser. Modern browsers also support a similar mechanism called local storage. Both are governed in the UK by the Privacy and Electronic Communications Regulations (PECR) and, where personal data is involved, by UK GDPR.
What this site stores
First-party storage (set by this site)
-
radiance_cookie_consent— local storage entry. Records the choice you make in the consent banner (both tools, analytics only, or rejection) together with a timestamp and policy version. We ask again after 180 days or when the tracking purposes change.
Used to remember your privacy choice, not to track visits. The entry remains until replaced or cleared, but a choice older than 180 days is not used.
Analytics cookies (set only after you accept)
If you choose "Analytics only" or "Accept all" in the consent banner, Google Analytics 4 is permitted to load and set the following cookies:
-
_ga— used by Google Analytics to distinguish unique visitors. Stores a randomly generated identifier. Persists for two years. -
_ga_ZRWEN1MYTN— used by Google Analytics 4 to maintain session state. Persists for two years.
These cookies allow us to see how many people visit the site, which pages they read, and where they came from (for example, a Google search or social media link). IP addresses are anonymised. We do not receive your name, email or any other identifying information from Analytics.
If you click "Reject all", these cookies are not set, no analytics data is sent, and Google Analytics remains dormant.
When analytics is allowed, we also measure the consultation journey: visits to pages with a form, consultation-button clicks, when the form is seen or started, submission attempts, generic validation or delivery errors, and confirmed successful enquiries. These events include the public page name and fixed labels such as the button position or field name. They never include anything you enter into the form. Phone, email, WhatsApp and skin-scan link clicks are measured as actions, not as confirmed enquiries.
Microsoft Advertising measurement (only after Accept all)
Microsoft Universal Event Tracking (UET) measures visits and completed website enquiries following our adverts. It receives technical information such as page URL, referring URL, browser and device information, IP address, cookie identifiers and Microsoft ad-click identifiers. The enquiry event only says that an enquiry was submitted; we do not send form fields, names, email addresses, phone numbers, photographs or Dermis scan results in this event.
UET can use first-party cookies such as _uetsid (session identification), _uetvid (visitor identification) and _uetmsclkid (ad-click attribution, up to 90 days). Microsoft may also use its own cookies, including MUID, MR and MSPTC, subject to your browser settings. See Microsoft's Privacy Statement for its processing and retention information.
The Microsoft tag is not loaded if you choose Analytics only or Reject all. Clarity session recording is disabled. Dermis widget openings and scans are not counted as completed enquiries.
Completed skin-scan measurement (only after Accept all)
When you start a skin scan after accepting advertising measurement, we can store a Microsoft ad-click identifier with a random matching reference for up to 30 days. The browser stores this in radiance_scan_attribution local storage. We send the random reference to Dermis so its completion notification can be matched to the original visit. Our measurement service keeps only the reference, click identifier, completion time and duplicate-prevention identifiers. It does not retain names, contact details, photographs, skin findings or treatment recommendations from that notification.
Microsoft receives only the click identifier, the name of the completed-scan conversion and its time. Test scans are excluded. Choosing Analytics only or Reject all prevents new advertising attribution. Changing Cookie settings withdraws this browser's active matching reference and removes pending conversions for it; it does not undo conversion data already sent to Microsoft. Scan-matching records expire after 30 days and are removed on the next integration request.
Enquiry source information
If you allow analytics, we keep a short source label and, where available, a campaign name in radiance_enquiry_source session storage. This helps April understand how you found us when you send the consultation form. Advertising source information is only used after Accept all. The record is limited to this browser tab and expires after 30 minutes; a new identifiable referral can replace it. We do not store full referring URLs, search terms or ad-click identifiers in this record.
The source and campaign are included in the enquiry email to April. They are indications, not verified ad conversions. If tracking is declined or the source cannot be established, the email says Unknown. Changing your cookie choice removes information that is no longer permitted. Closing the tab clears this session storage.
Private activity totals
We keep private daily totals of successful website form submissions and verified Dermis skin-scan completions to monitor the enquiry service. These operational totals do not depend on accepting optional cookies and contain no names, contact details, message text, photographs or skin findings. Form submissions are counted only after the mail service accepts the enquiry. Dermis notifications use a hashed scan identifier to prevent duplicate counts; known tests and samples are excluded. The connected Dermis funnel may also be used through a QR code or direct link, so its completion total is not necessarily website traffic.
If you allow analytics, a website WhatsApp link click also increments a private daily total. This uses a random identifier for that click only, without setting a cookie or tracking you across visits. A click does not establish that you sent a message. Declining analytics prevents this click measurement. Available enquiry-source labels are included only under the existing consent choices described above, and are not verified advertising attribution.
Daily totals are retained for up to 400 days; hashed identifiers used to prevent duplicate counting are retained for up to 90 days. These reports are access-controlled and are not sent to Microsoft or Google. They cannot identify unique clients or confirm bookings.
Enquiry confirmation
After a successful form submission, a short-lived server-side receipt uses a secure session cookie to confirm that the enquiry was received and prevent repeated conversion counts when the thank-you page is refreshed. The receipt expires after ten minutes and contains only the success confirmation and the name of the public page containing the form. It contains no contact details or message text. It is only sent to optional measurement services where you have chosen to allow them.
Third-party loads
-
Google Fonts — the site loads two typefaces (Cormorant Garamond and Jost) from
fonts.googleapis.comandfonts.gstatic.com. This is for typography and does not set tracking cookies. Google may receive your IP address as part of the request, as is the case for any web font request; nothing else is shared by this site. -
Google Analytics 4 — analytics script loaded from
googletagmanager.com. Only activates after consent (see above). -
Dermis AI — the homepage loads the Dermis embed from
admin.dermis.aito offer the interactive preview. Dermis may use its own cookies or local storage when you use the embedded service. See the Dermis privacy policy for its data practices.
What this site does not use
For clarity, the following are not present on this website:
- No Google Ads, Meta/Facebook Pixel, TikTok Pixel or LinkedIn Insight tags.
- No measurement tags beyond Google Analytics and Microsoft UET as described above.
- No social media share or "like" buttons that load third-party trackers.
- No session-recording or heatmap tools.
- No sale of your contact details or clinical records to advertisers.
Managing your choice
The consent banner offers Reject all, Analytics only and Accept all. Your choice is remembered for up to 180 days. We ask again when the tracking purposes change, including when enquiry source information was introduced.
Select Cookie settings in any page footer to change your choice. Withdrawing consent stops future optional tracking and reloads the page. We remove accessible first-party measurement cookies; you can remove third-party cookies through your browser settings. Withdrawal does not erase information already received by Google or Microsoft.
Browser-level cookie controls
You can also block or delete cookies directly in your browser settings. Most major browsers publish guidance:
Changes to this policy
If anything changes about how the site uses cookies or storage, this policy will be updated and the date below revised.
Contact
Questions about this policy can be sent to april@radianceaesthetics.co.
Back to site