Cookie Policy
Effective Date: September 10, 2026
This Cookie Policy explains the cookies and similar storage technologies used on sunshinemedspa.com, who sets them, and what choices you have. It supplements our Privacy Policy.
1. Our Approach in Plain Terms
No analytics or advertising cookies are set before you click “Accept.” When you first visit, our consent banner appears and no Google Analytics or Meta (Facebook) Pixel technology loads until you affirmatively accept.
If you decline, your choice is honoured. A decline is remembered on the other pages you visit and on later visits, and analytics and advertising technologies stay off. You can change your choice at any time by clearing your browser’s site data for sunshinemedspa.com, which brings the banner back.
Booking and newsletter tools load only when you use them. Our online booking is provided by PatientNow and loads only when you click the button to open it. Our newsletter signup is provided by MailerLite and loads only when you interact with the signup form. Neither one runs simply because you opened a page.
2. What Is Actually Set
The table below reflects what is set on this website. “localStorage” entries are stored by your browser rather than sent with every request, but we list them here for completeness.
| Cookie / storage | Set by | When | Purpose | Duration |
|---|---|---|---|---|
cookieConsent (localStorage) | sunshinemedspa.com | On Accept or Decline | Remembers your cookie choice | Until cleared |
ml_guid (localStorage) | MailerLite | On newsletter form interaction | Form/session identifier | Until cleared |
_ga, _ga_90M3W8J0SZ | Google Analytics | Only after Accept | Distinguishes users; GA4 session state | ~2 years |
_fbp | Meta Pixel | Only after Accept | Advertising attribution | ~90 days |
lastExternalReferrer, lastExternalReferrerTime (localStorage) | Meta Pixel | Only after Accept | Referrer attribution | Until cleared |
AWSALBCORS | PatientNow | On loading the booking form | Load balancer session | ~7 days |
3. Strictly Necessary
cookieConsent is the only entry we set ourselves, and it exists solely to remember your cookie choice. Without it we could not honour a decline, and the banner would reappear on every page.
4. Analytics
Google Analytics 4 (_ga, _ga_90M3W8J0SZ), delivered through Google Tag Manager, helps us understand which pages and treatments visitors are interested in. It loads only after you accept. Google’s handling of this data is governed by the Google Privacy Policy.
5. Advertising
The Meta (Facebook) Pixel (_fbp, plus lastExternalReferrer and lastExternalReferrerTime in localStorage) measures the performance of our advertising. It loads only after you accept. See the Meta Privacy Policy.
6. Service Providers That Load On Use
PatientNow provides our online appointment and consultation booking. When you click to load the booking form, your browser connects to PatientNow and it sets an AWSALBCORS cookie to keep your session on the same server. Loading the booking form is not conditioned on your cookie choice — if you declined tracking, you can still book.
MailerLite provides our newsletter signup. When you interact with the signup form, MailerLite loads and may store an ml_guid identifier. If you decline cookies, we remove any ml_guid already stored in your browser.
Formspree processes our contact and referral form submissions. It receives what you type into those forms when you submit them.
7. Managing Cookies in Your Browser
You can block or delete cookies through your browser settings, and you can browse this site with them blocked. Blocking cookieConsent means we cannot remember your choice, so the banner will reappear.
We honour the Global Privacy Control signal where your browser sends one. For advertising choices, see our Opt-Out Preferences page.
8. Health Information
Please do not send detailed health information or photographs of a condition through website forms, email, or SMS. These are not secure channels and are not a patient portal. Protected health information is governed by our Notice of Privacy Practices (effective March 1, 2026), available at the med spa on request.
9. Changes to This Policy
If the technologies on this site change, we will update this page and its effective date.
10. Contact Us
Questions about this policy: privacy@sunshinemedspa.com or 352.234.3340.