Privacy and cookies
What this site collects, why, who sees it, and what it stores on your device. It is short because the site does little: two cookies — a sign-in and a currency choice you make yourself — no analytics, no advertising, and no third party watching you browse.
Last reviewed 8 August 2026
Who is responsible
Keypills Medical Ltd, trading as Keypill, is the controller of the personal data described here. Registered address: 128 City Road, London, United Kingdom, EC1V 2NX.
Anything in this document — a question, a request about your data, or a complaint — goes to sales@keypill.com, or +447830002000 on WhatsApp. Written requests are easier to act on and easier to evidence.
What we collect
All of it comes from you, and almost all of it arrives on one form. Nothing is bought from a data broker and nothing is inferred from your browsing.
| Data | Where it comes from |
|---|---|
| Account | Clinic or company name, contact name, email, phone, country, city, address and postcode. Optionally a company registration number, a VAT number, a practitioner or clinic licence number, a website, and any note you add to the application. |
| Password | Never stored. What is kept is a scrypt hash, from which the password cannot be recovered. |
| Sign-in sessions | A random token, held only as its SHA-256 digest, with an expiry and the browser's user-agent string truncated to 255 characters. |
| Orders | The lines ordered, the amounts calculated at the time, the delivery and recipient details as they stood on the day, and any delivery note you add. |
| Saved products | The wishlist is stored against your account. The basket and the comparison list are not — see section 06. |
Why we hold it, and on what basis
| Purpose | Basis |
|---|---|
| Taking and fulfilling an order | Performance of a contract with you. |
| Verifying that an applicant is a clinic or a qualified professional | Our legitimate interests, and the reason the account gate exists: these are prescription and professional-use products. |
| Keeping sign-ins working and rate-limiting credential attempts | Our legitimate interests in the security of the account. |
| Keeping records of what was sold and to whom | Compliance with our legal obligations. |
We do not profile you, we do not make automated decisions about you, and we do not use your data for marketing without asking you first.
Cookies: the one we set
A cookie is a small piece of text a site asks your browser to keep and send back on the next request. It is how a site can tell that two page loads came from the same person — which, for a site with a sign-in, is the whole job.
| The sign-in cookie | Detail |
|---|---|
| Name | keypill_session |
| What it does | Holds a random sign-in token. The server matches that token to a session record; the cookie itself carries no name, no email and no account detail. |
| Type | Strictly necessary. It is the sign-in — without it there is no way to stay signed in between page loads. |
| Expires | On the session's expiry date, or immediately when you sign out, whichever comes first. |
| Set by | Keypills Medical Ltd. It is a first-party cookie; no other party can read it. |
- It is httpOnly, so page scripts cannot read it — including any script an attacker managed to inject.
- It is sameSite=lax, so it is not sent on cross-site requests.
- It is marked secure in production, so it only travels over HTTPS.
- Signing out deletes both the cookie and the session record behind it.
| The currency cookie | Detail |
|---|---|
| Name | keypill_currency |
| What it does | Remembers which currency you chose from the header — EUR, USD or GBP — so prices keep reading in it on your next visit. It holds that three-letter code and nothing else. |
| Type | A preference you set yourself. It is only ever created when you pick a currency from the selector; the geographic default never writes it. Storing a choice you explicitly made is what keeps it inside the consent exemption — there is still no banner because there is still nothing to ask. |
| Expires | Six months after your last choice. |
| Set by | Keypills Medical Ltd. First-party, httpOnly, never used for tracking of any kind. |
What we do not set
Worth stating plainly, because it is unusual enough that a reader will assume otherwise:
- No analytics of any kind. No Google Analytics, no tag manager, no product analytics, no heatmaps, no session recording.
- One thing is derived from your connection: the hosting platform reads an approximate country from your address and this site uses it to choose the currency your prices are displayed in. The country is used for that decision and is not stored, logged or attached to anything. Exchange rates come from a European Central Bank feed fetched by our server — that request carries nothing about you.
- No advertising or retargeting pixels, and no social-network trackers.
- No third-party scripts, iframes or embeds load on any page by themselves. The one exception is opt-in: the contact page offers a Google map that loads only after you press the button naming Google. Loading it connects your browser to Google, which sees your IP address and may set its own cookies under Google's privacy policy — before that press, nothing from Google loads.
- No web fonts fetched from anyone else: the typeface is downloaded when the site is built and served from this domain, so your browser never asks Google for it.
- Every image on the site is served from this domain too. Nothing is hotlinked.
What is kept on your device instead
Two things live in your browser's local storage rather than in a cookie. They stay on your device, are not sent to us as a record, and you can clear them at any time by clearing site data.
| Key | What it holds |
|---|---|
| keypill.cart | The products in your basket and their quantities, as identifiers only. Prices are never kept here — the server prices the basket from the identifiers each time, which is also why a basket cannot go stale against a catalogue change. |
| keypill.compare | The products you have added to the comparison, as identifiers only. |
Neither contains your name, your email or anything about your account. Your wishlist works differently on purpose: it is stored against the account, so it survives changing device.
Who else sees it
- The carrier delivering your order. Sending a parcel means giving them the recipient's name, phone number and address — there is no way to deliver without it.
- The provider that hosts this site and its database, in the ordinary course of running the servers.
- Anyone we are legally required to disclose to, if that ever arises.
That is the complete list. We do not sell personal data, we do not rent it, and we do not share it with advertisers or data brokers.
How it is protected
- Passwords are hashed with scrypt at deliberately expensive work factors. A database copy does not hand over anybody's password.
- Session tokens are stored only as SHA-256 digests, so a database copy does not hand over live sign-ins either.
- Sign-in and password-change attempts are rate limited.
- Every request re-checks the account's status server-side. Suspending or rejecting an account invalidates the sessions it already had.
- Wholesale prices are not sent to browsers that are not signed in to an approved account — the gate is on the server, not in the stylesheet.
No system is beyond reach. If we ever discover a breach that is likely to put your rights at risk, we will tell you and the supervisory authority within the time the law allows.
How long it is kept
- Sessions expire on their own and are deleted when you sign out.
- Order records are kept as the commercial and accounting record of what was sold. They cannot be deleted without destroying that record.
- Account details are kept while the account is open.
- Wishlist entries are kept until you remove them or the account closes.
If you want your account closed, email sales@keypill.com and say so. We will tell you what has to be retained as a legal record and what can be removed.
Your rights
Under UK and EU data protection law you can ask for access to your data, correction of it, erasure of it, restriction of how it is used, a copy of it in a portable form, and you can object to processing based on legitimate interests. Where we ever rely on consent, you can withdraw it.
Some of it you can do yourself without asking: your account pages let you correct your clinic details, change your email address and change your password. For anything else, email sales@keypill.com. We answer enquiries within one working day, and formal requests within the month the law allows.
If you are not satisfied
Tell us first — sales@keypill.com — because most of it is faster to fix than to escalate. If that does not resolve it, you can complain to the Information Commissioner's Office in the United Kingdom, or to the supervisory authority in your own country if you are in the EEA. Complaining to us does not remove that right.
Changes to this page
The date under the title is when this was last reviewed. If what the site collects or sets ever changes — a payment provider, an analytics tool, an embedded map — this page is updated in the same change, not afterwards.