Cookies
In short
Until you agree, this site sets no cookies that require consent and contacts no external analytics or advertising servers. If you agree to statistics, we switch on Google Analytics: we see how visitors find the site and which Google ads bring customers and patients.
We do not show ads based on your behaviour, and do not ask your consent for it.
Strictly necessary
Under Article 73(4) of the Lithuanian Law on Electronic Communications these need no consent, because without them the service would not work.
| What | Why | For how long |
|---|---|---|
| Bot protection on the booking form (Cloudflare Turnstile) | So the form cannot be filled in automatically | For the session |
| Payment (Stripe), if you buy a product | Payment security on Stripe's side | Set by Stripe |
Basket (browser localStorage) |
So the products you picked survive moving around the site | Until you empty the basket |
A started order form (browser localStorage) |
So returning from the payment page does not mean retyping your name, phone, email and chosen parcel locker | 24 hours, or until the order is placed |
Your answer to the cookie banner (browser localStorage, km:consent) |
So we do not ask on every page | 12 months, then we ask again |
The basket and a started order form are kept in your browser only and are never sent to us. Consent ticks are never stored there, and once the order is placed that data is deleted from the browser.
Turnstile is a third-party service: to check that you are a person, your browser contacts Cloudflare's servers. This happens only on the booking and purchase forms.
Fonts and images are served from our own server rather than from external services.
Statistics and ad measurement (only with consent)
| What | Why | For how long |
|---|---|---|
_ga, _ga_… (Google Analytics) |
To tell visits and sessions apart, so we can see how the site is used | 2 years |
_gcl_… (Google) |
To link a visit to the Google ad it came from | 90 days |
Ad click identifier (browser localStorage, km:click) |
So an order or a booking request knows which ad you came from | 90 days |
If you came from an ad, then until you agree to statistics its click identifier travels only in the addresses of the next pages of this site; it is stored in your browser only once you agree. In the statistics of booking requests, with or without consent, we note only whether you came from a Google ad and from which campaign, without the click identifier. Once a request is confirmed, that note stays linked to the visit, so we can see how many patients from ads actually come.
What we see: which pages were opened, where you came from, whether you viewed a product, added it to the basket, started checkout or sent a booking request, and the amount of a paid order. Your name, phone, email and the names of the products are not sent to Google. Our server tells Google Analytics about a payment once Stripe confirms it; for that, the order keeps your browser's Google Analytics identifier and, if you came from an ad, the ad click identifier. A booking request keeps the same identifiers while the clinic handles it: once it is confirmed or rejected they are deleted with it, and they are never linked to a patient record.
The data is processed by Google Ireland Limited and may be transferred to Google LLC in the United States under the EU-U.S. Data Privacy Framework. Google Analytics keeps it for 14 months.
Changing your mind
At any time, press "Cookie settings" at the bottom of the site and choose "Decline": statistics are switched off, and Google's cookies and the stored click identifier are deleted. Strictly necessary cookies can be deleted or blocked in your browser settings; the booking form and payment may then stop working.
Questions: info@kmclinic.lt