Sign in

Legal

Cookie Policy

Which cookies and similar technologies Zaynix Health uses, why, and how you control them. This marketing website itself sets essential cookies only and runs no analytics.

Last updated 6 July 2026. This is the same text shown inside the Zaynix Health app — one policy, published in both places.

This website (zaynix.health)

This site is a static page served by Cloudflare Pages. We run no analytics and set no cookies of our own; Cloudflare processes your IP address and browser details to serve and protect the site, and may set a short-lived bot-protection cookie. On the Support and Arrange-a-call pages, Cloudflare's Turnstile check processes every visitor's IP address and browser details to tell a person from a bot. A message sent through the contact form is kept as a ticket in Zaynix Limited's HubSpot service desk and in its Microsoft 365 mailbox for as long as the correspondence needs, then deleted; an e-mail to privacy@zaynix.health is kept the same way. Our lawful basis for all of this is our legitimate interest in running the site and answering you (UK GDPR Article 6(1)(f)). Cloudflare, HubSpot and Microsoft may process this data outside the UK under their data processing terms. Your rights, and how to complain to the ICO, are set out in the policy below, which governs the Zaynix Health service itself.

1. What This Policy Covers

Cookies are small text files stored on your device. This policy also covers similar browser-storage technologies — localStorage and sessionStorage — which the platform uses more than traditional cookies. Under the Privacy and Electronic Communications Regulations (PECR), the same consent rules apply to any storage of or access to information on your device, not just cookies.

We use these technologies mainly to keep you signed in and to make the platform work. Strictly necessary items are exempt from consent under PECR; anything non-essential (functional/analytics) requires your consent, which we collect via the cookie banner.

2. Storage Inventory

The following is the storage the platform sets. First-party items are set by Zaynix Health; third-party items are set by our providers (Auth0, Stripe).

2.1 Strictly necessary (no consent required)

Name Type Purpose Duration Category
Auth0 session cookies Cookie (third-party, Auth0) Authentication token / session Session / provider-defined Essential
auth0.is.authenticated localStorage Auth0 “is signed in” flag Session Essential
sb_admin_token localStorage Superuser/admin session (staff only) Session Essential
acting_as_org_id localStorage HCP “viewing patient” org context Session Essential
acting_as_disconnected localStorage HCP acting-as state Session Essential
hcp_active_org localStorage Active clinic for an HCP Session Essential
pending_invite_token localStorage Holds an organisation invite while you sign in Transient Essential
consent_versions localStorage Tracks which consent versions you accepted Persistent Essential
cookie_consent / cookie_consent_date / cookie_consent_version localStorage Records your cookie choice Persistent Essential
pcl_confirming sessionStorage Guards the Patient Confirmation Layer flow Session Essential
logout_backend_error sessionStorage Carries a logout error message Session Essential
_chunkReloadTs sessionStorage Recovery from a stale app bundle Session Essential

2.2 Functional (improve your experience — consent-based)

Name Type Purpose Duration Category
feature_cache localStorage Caches feature-flag state to cut API calls ~60s TTL Functional
blood_tests_sort / blood_tests_view_mode localStorage Remembers your Blood Tests view preferences Persistent Functional
zaynix_upload_jobs localStorage Tracks in-flight uploads across a refresh Transient Functional
su_preview_consumer localStorage Staff “preview as consumer” toggle (staff only) Session Functional

2.3 Third-party (payment)

Name Type Purpose Duration
Stripe cookies Cookie (third-party, Stripe) Fraud prevention / checkout during payment Provider-defined

2.4 Analytics (consent-based)

Zaynix Health will use privacy-respecting analytics to understand how the platform is used and to improve it. Analytics runs only if you choose “Accept all” — choosing “Essential only” genuinely suppresses it.

No analytics cookies are currently set: no analytics tool is yet shipped in the application. When the analytics tool goes live, this inventory will be updated with the specific tool, cookie/storage names, and durations before it starts collecting.

4. Managing Cookies in Your Browser

You can block or delete cookies and clear localStorage/sessionStorage through your browser settings (typically DevTools > Application > Storage). Blocking strictly necessary items will prevent you from signing in.

For more information on managing cookies in your browser, visit allaboutcookies.org .

5. Third-Party Providers

  • Auth0 (Okta) may set authentication cookies.
  • Stripe may set cookies during checkout for fraud prevention.
  • We do not use advertising, social-media, or cross-site tracking cookies.

6. Changes to This Policy

We may update this policy. If we introduce new non-essential cookies we will ask for your consent and update the version. The “Last updated” date reflects the current version. See also our Privacy Policy.

7. Contact Us

If you have questions about our use of cookies, please get in touch via our contact page .

© 2026 Zaynix Limited. All rights reserved.