Legal
Privacy policy
Last updated: 20 July 2026
What we collect
By default this site collects nothing beyond standard server access logs (IP address, user agent, requested URL, timestamp), retained for 30 days for security and operational diagnostics. If — and only if — you opt in via the cookie banner, we also collect aggregate, anonymised usage statistics through Google Analytics 4. We do not collect names, payment details or build marketing profiles.
Cookies
We set one strictly necessary first-party cookie to remember your light/dark theme preference. This is exempt from consent because the site cannot provide that feature without it.
We would also like to use Google Analytics 4 to understand which pages are useful. GA4 sets its own cookies (for example _ga and _ga_*) with IP addresses truncated before storage. These are only set if you opt in. Nothing analytics-related loads until you choose “Accept analytics” on the cookie banner, and you can withdraw consent at any time — we then expire the GA cookies. We do not use advertising, remarketing or cross-site tracking cookies.
— review or change your analytics choice.
Future newsletter / login features
We may introduce optional newsletter and user-account features in future. Where those features collect email or authentication data, they will be processed under UK GDPR with explicit opt-in. Account data will be stored in a self-hosted PostgreSQL database under our control; emails will not be shared with third parties.
Your rights
You have the right under UK GDPR to access, correct, or delete any personal data we hold about you. Contact [email protected] to exercise these rights. We respond within the statutory 30-day window.
Outbound links
We link to external sites (MHRA, EMA, PubMed, manufacturer pages, partner suppliers). Those sites have their own privacy practices and we accept no responsibility for them.