Cookies Notice

1. What this covers

This policy covers what we store on the device you are reading this on, and what leaves it. Cookies are only part of that. Some of what we use is not a cookie at all - it is local storage, which sits in your browser and, for the purposes of this policy and of the law, behaves the same way. We describe both.

It applies to our websites, octohealth.com and hioctohealth.com. What the app stores on your phone is described in the Privacy Policy.

In summary, we share the following data with third parties for assistance with our website function through cookies. We are using cookies as a “catch-all” term for tracking technologies deployed on our website.

2. Strictly necessary

These run whether or not you accept anything, because without them the site does not work. They remember the cookie choice you made so we stop asking, protect the sign-up and payment forms from automated abuse, and prevent payment fraud. Note that our payment provider's fraud-prevention cookies may load on every page, not only at checkout. That is how the provider is built.

3. Analytics

We measure how the site is used so we know which pages help and which do not. Two tools do this.

One is hosted in the European Union, sets nothing at all on your device, and counts page views in aggregate. It runs for everyone, because there is nothing stored on your device to ask you about.

The other is Google Analytics. It runs only where you have accepted. It sets no cookies on our sites: we send the measurements ourselves, and the identifiers it needs are kept in your browser's local storage rather than in a cookie. They are a random identifier and a session counter, and they say nothing about you.

4. Advertising

We advertise, and we measure whether those adverts lead anywhere. This is Meta's advertising pixel. It sets one cookie, and records that a visit or a sign-up happened along with the campaign that brought you. It loads only after you accept.

5. Health records

Octo Health is a health company, so this deserves saying rather than assuming.

Your health record is not disclosed to any third-party through cookies. For example, if you tell us you are managing a chronic condition, that is health data. It is used to serve you inside the product and is not passed to an analytics or advertising tool.

6. How to change your mind

Your choice is yours to revisit, and none of this is one-way.

Use the cookie settings on this page at any time, including withdrawing a choice you made earlier.

Each of our sites asks separately, because your choice is stored for the site you are on and does not travel between them.

Your browser can block or delete what is stored. Blocking the strictly necessary items will stop you signing in or prevent the website from properly functioning.

There is no common standard for Do Not Track, so we do not respond to it. We do honour Global Privacy Control as an opt-out where the law provides for it.

7. Cookies that are not strictly necessary

We ask for your consent before anything that is not strictly necessary is placed on your device. Nothing in the analytics or advertising sections above runs until you accept. As noted above, we do not share health information for cross-context behavioural advertising.

8. Leaving the European Union

The tools described above - Google, Meta and Stripe - and the two functional services our pages embed, Cloudflare's bot protection and Cal.com's call scheduling, are operated by companies in the United States, and using them means data about your visit reaches them there. Those transfers rely on the mechanisms the law provides for them.