Cookie Policy

Last updated 23 September 2026

This policy explains how the SafeStyle Wholesale Prescription trade site uses cookies and similar technologies, exactly which ones we set, what each is for, and how you can control them.

The short version

We do not use advertising, marketing or profiling cookies on this site.
We do not run Google Analytics, Google Tag Manager, the Meta pixel, or any other third-party analytics or ad network here.
We do not sell or share anything stored on your device with advertisers or data brokers.
Everything we set is either strictly necessary (site access, signing in, security, payment) or a functional convenience (your cart and your display preferences).
Because we set no marketing or analytics cookies, this site does not show a cookie consent banner. You can still block or delete cookies at any time using your browser.

1. What cookies and similar technologies are

A cookie is a small text file that a website asks your browser to store, and that your browser sends back with each later request to that site. Cookies are how a website recognises that two page loads came from the same person, which is what makes signing in and keeping an order together possible at all.

A few distinctions matter for the tables below:

First-party cookies are set by this site. Third-party cookies are set by another company whose content or service appears on a page.
Session cookies are erased when you close your browser. Persistent cookies stay until they expire or you delete them.
HttpOnly means the cookie cannot be read by JavaScript running in the page, which limits the damage a malicious script could do. Secure means it is only ever sent over an encrypted HTTPS connection. SameSite=Lax means it is not sent when another website makes a background request to us.

This site also uses your browser’s local storage and session storage. These work like cookies in that they keep information on your device, but unlike cookies they are never automatically attached to requests sent to our servers. We use them for things such as remembering your cart, how you have laid out the cart panel, and your preferred product view. They are listed separately in section 3 so you have the full picture.

2. Strictly necessary cookies we set

These are first-party cookies set by SafeStyle. Every one of them is required for a feature you have actively asked for: entering the site, signing in, paying an invoice, or placing a contract order. All of them are marked HttpOnly, Secure and SameSite=Lax, so none can be read by scripts in the page and none follow you to other websites. None are used for advertising or profiling.

Cookie	What it does	Expires
website_domain_access_2	Records that you have entered the site access password, so you are not asked for it again on every page.	30 days
portal_session	Keeps you signed in to your trade account. Identifies your session so we can show your pricing, orders and invoices.	8 hours
portal_auth_pending	A short-lived token held between you starting a sign-in and completing the verification step.	10 minutes
portal_payment_session	Authorises an invoice payment session once you have verified your access code, so you can review and pay without signing in again.	45 minutes
portal_contract_order	Holds you in contract order mode while you redeem a prescription voucher or place a contract order.	2 hours
portal_asset_token	Set only if you open a shared asset link. Lets you view the files that link covers without a trade account.	When the share link expires
portal_staff_sso_state	A one-time anti-forgery value used while a SafeStyle staff member signs in through single sign-on. Not set for customers.	10 minutes

Because these cookies are strictly necessary to deliver a service you have requested, they are set without asking for consent. Blocking them will prevent you from entering the site or signing in.

3. Local and session storage we use

These entries are stored by your browser on your own device and are not transmitted to us automatically. They exist so the site remembers your work and your preferences instead of resetting every time you load a page.

Key	What it does	Kept until
safestyle_cart_v1	The contents of your cart, so an unfinished order is still there when you come back.	You clear it or clear site data
safestyle_cart_width_v1, safestyle_cart_footer_v1	How you have arranged the cart panel on a desktop screen: how wide you dragged it, and whether you folded its order summary down to one line.	You clear site data
safestyle_cart_recovery_dismissed_v1	Remembers that you dismissed the prompt offering to restore a saved cart, so it stops reappearing.	You clear site data
ss_mop_prefs_v1, ss_mop_cart_width_v1	Your layout and filter preferences on the bulk ordering screen, and how wide you dragged its order panel.	You clear site data
ss-collection-view, ss-product-list-view	Whether you prefer products shown as a grid or a list.	You clear site data
ss_voucher_request_theme	Your light or dark display choice on the voucher request screens.	You clear site data
portal_pay_batch, portal_pay_invoices, portal_pay_invoices_full, portal_inv_pay_batch, portal_inv_pay_invoices, portal_inv_pay_invoices_full	Carries which invoices you selected through to the payment step so the amounts match what you chose.	Replaced at your next payment
ss404:best:…	Your best score in the small game on our page-not-found screen. Purely for fun.	You clear site data
pnav_customer_name	Session storage. The account name shown in the portal navigation, so it appears immediately on the next page.	You close the tab

4. Third parties

We keep third-party content on this site to a minimum. The three below are the only external services that can place anything on your device, and none of them are advertising networks.

Cloudflare — hosting and security

This site runs on Cloudflare’s network. Cloudflare may set its own cookies to distinguish genuine visitors from automated traffic and to protect the site against attack. These are security cookies and are not used to build a profile of you or to target advertising.

eWAY — invoice payments

When you pay an invoice you are taken to eWAY’s hosted payment page to enter your card details. That page is operated by eWAY and sets its own cookies under eWAY’s privacy and cookie policies. Your card details are entered on eWAY’s page, not ours.

YouTube — embedded video

Some pages embed video from YouTube. We use YouTube’s privacy-enhanced mode (youtube-nocookie.com), which means YouTube does not set cookies for tracking unless you actually press play. If you do play a video, YouTube may set cookies under Google’s policies.

We do not embed social media pixels, advertising tags, session recording tools, heat mapping, chat widgets or A/B testing scripts on this site.

5. How to control cookies

Every major browser lets you see the cookies a site has set, delete them, and block new ones. You will usually find the controls here:

Chrome — Settings, then Privacy and security, then Third-party cookies and Site settings.
Safari — Settings, then Privacy, then Manage Website Data.
Edge — Settings, then Cookies and site permissions.
Firefox — Settings, then Privacy & Security, then Cookies and Site Data.

Clearing site data for this domain also removes the local and session storage listed in section 3, including anything left in your cart.

Please note: the cookies in section 2 are not optional extras. If you block first-party cookies for this domain you will not be able to pass the site access password, sign in to your trade account, place an order or pay an invoice, because the site will have no way to recognise you between one page and the next.

6. Changes to this policy

We update this page whenever the cookies or storage this site uses change, and we revise the date at the top when we do. If we ever introduce analytics or marketing cookies, we will update this policy and put appropriate consent controls in place before those cookies are set.