Skip to content
Swiss Lab logoSWISS LAB
Legal documents

Cookie policy

Last updated: 2 September 2026

1. What cookies are

Cookies are small text files saved on your device (computer, tablet, phone) while you use the SWISS LAB website (the “Site”). They keep you signed in, remember what is in your cart and let the Site adapt to your preferences.

Alongside cookies the Site uses similar technologies, in particular localStorage — the browser's local storage, which holds your cart contents and your cookie choices.

2. Controller

The controller of personal data collected through the Site is SWISS MEDLAB LTD, registered office at 128 City Road, London EC1V 2NX, United Kingdom, registered at Companies House (England and Wales) under company number 17295411 (the “Controller”). You can contact the Controller — including about your data-protection rights — at bok@swiss-medlab.shop or through the contact form on the home page.

3. Legal basis

Cookies are used under electronic-communications law and, where they involve processing personal data, under Regulation (EU) 2016/679 (GDPR):

  • necessary cookies — Art. 6(1)(f) GDPR (the Controller's legitimate interest in the Site working correctly),
  • analytics and marketing cookies — Art. 6(1)(a) GDPR (your voluntary consent given through the cookie banner).

4. Cookies we use

a) Necessary cookies (always on)

  • Session / authentication — cookies from our authentication provider (Supabase Auth, prefix sb-) that keep you signed in; lifetime: until sign-out or session expiry.
  • Shopping cart — the swisslab_cart_v1 entry in localStorage holding your cart; lifetime: until you clear it.
  • Consent record — the swisslab_cookie_consent_v1 entry in localStorage holding your cookie choice; lifetime: until you clear it.
  • Language choice — the swisslab_lang cookie remembering your language version; lifetime: 12 months.

b) Analytics cookies (optional — consent required)

  • Anonymous visit statistics (visit counts, traffic sources, page popularity) used to improve the Site — Google Analytics 4. The script loads only after you consent to analytics cookies.

c) Marketing cookies (optional — consent required)

  • Personalisation of content and ads, and campaign measurement. The Site currently uses no marketing cookies; if we introduce them they will run only after you consent.

5. Managing your consent

On your first visit a banner lets you accept all cookies, choose categories individually (“Customise”) or keep only the necessary ones (“Necessary only”).

You can withdraw or change your consent at any time by clearing site data in your browser settings (which brings the banner back) or clearing localStorage for the Site's domain. Withdrawal does not affect the lawfulness of processing carried out beforehand.

6. Managing cookies in your browser

You can manage cookies yourself in your browser settings, including blocking or deleting them:

  • Google Chrome: Settings → Privacy and security → Cookies
  • Mozilla Firefox: Settings → Privacy & Security → Cookies
  • Safari: Preferences → Privacy → Manage website data
  • Microsoft Edge: Settings → Cookies and site permissions

Blocking necessary cookies may make key parts of the Site unusable — in particular signing in and placing orders.

7. Recipients of the data

Data collected through necessary cookies may be processed by our infrastructure providers: the authentication and database provider (servers in the EEA) and the application hosting provider. They process the data under processing agreements compliant with Art. 28 GDPR.

8. Your rights

In connection with the processing of your personal data you have the right to:

  • access your data (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing (Art. 21 GDPR),
  • withdraw consent at any time (Art. 7(3) GDPR),
  • lodge a complaint with the supervisory authority for your place of residence (in the UK: the Information Commissioner's Office).

9. Changes to this policy

The Controller may amend this policy, in particular when new analytics or marketing tools are introduced. Material changes will be announced by showing the consent banner again.