Cookie Policy
Last updated: 8 September 2026
This Cookie Policy explains how MDHAND ("we", "us", "our"), operator of the website www.mdhand.com (the "Website"), uses cookies and similar technologies (such as pixels, web beacons, scripts, tags and local storage) when you visit our Website. It also explains the choices you have regarding these technologies.
This policy applies to visitors located in the European Economic Area (EEA), the United Kingdom and Switzerland. Where we process your personal data through cookies, we do so in accordance with the EU General Data Protection Regulation ("GDPR"), the UK GDPR, and the applicable ePrivacy rules (including the EU ePrivacy Directive 2002/58/EC and the UK Privacy and Electronic Communications Regulations ("PECR")).
Our Website is powered by Shopify. Shopify and other third parties may also set cookies or similar technologies on our Website as described below.
1. What are cookies?
Cookies are small text files that are placed on your device (computer, tablet or mobile phone) when you visit a website. They are widely used to make websites work, or work more efficiently, and to provide information to the website owner. Similar technologies include pixels, web beacons, SDKs and local storage.
- First-party cookies are set by our Website.
- Third-party cookies are set by other organisations (for example, Shopify, Google or Meta) whose services we use.
Cookies can be "session" cookies (deleted when you close your browser) or "persistent" cookies (stored until they expire or until you delete them).
2. Legal basis for the use of cookies
We rely on the following legal bases under Article 6 GDPR / UK GDPR:
- Strictly necessary cookies are essential for the Website to function and to provide services you have requested (for example, remembering the items in your shopping cart and processing payments). These are set on the basis of Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (our legitimate interests in operating a secure and functional website). Your consent is not required for these cookies.
- All other cookies — including functional/preference, analytics/statistics and marketing/advertising cookies — are only set with your prior, explicit consent (Article 6(1)(a) GDPR, and Article 5(3) of the ePrivacy Directive / PECR). You may withdraw your consent at any time.
3. Categories of cookies we use
3.1 Strictly necessary cookies
These cookies are required for the Website to operate and cannot be switched off in our systems. They enable core functionality such as navigation, the shopping cart, checkout and security.
Examples (Shopify):
| Cookie | Purpose | Duration |
|---|---|---|
cart, cart_ts, cart_sig
|
Store and maintain the items in your shopping cart | Session / up to 2 weeks |
secure_customer_sig |
Used for secure customer login | 1 year |
_secure_session_id |
Maintains your session | 24 hours |
checkout_token, checkout
|
Manage the checkout process | 1 year / session |
storefront_digest |
Password-protected pages | 2 years |
_cmp_a |
Consent management (stores your consent choice) | 1 day |
CookieConsent / _tracking_consent
|
Stores your cookie preferences | 1 year |
3.2 Functional / preference cookies
These cookies remember choices you make to improve your experience, for example your language, region or currency preferences.
Examples: `localization`, `_shopify_country_redirect`, language/currency preference cookies.
3.3 Analytics / statistics cookies
These cookies help us understand how visitors interact with the Website by collecting information about page visits, traffic sources and usage patterns. The information is aggregated and helps us improve the Website.
Examples:
| Provider | Cookie | Purpose | Duration |
|---|---|---|---|
| Shopify |
_shopify_y, _shopify_s, _s, _y
|
Shopify analytics | Session to 1 year |
| Shopify |
_shopify_sa_p, _shopify_sa_t
|
Marketing & analytics attribution | 30 minutes |
| Google Analytics |
_ga, _ga_<ID>, _gid, _gat
|
Website usage analytics | Up to 2 years |
3.4 Marketing / advertising (targeting) cookies
These cookies are used to show you relevant advertisements on our Website and on third-party websites, to measure the effectiveness of our advertising, and to support personalised advertising. They may be set by us or by third parties such as Shopify, Meta (Facebook/Instagram), Google Ads, TikTok and other advertising partners.
Examples:
| Provider | Cookie | Purpose | Duration |
|---|---|---|---|
| Shopify |
_landing_page, _orig_referrer
|
Track landing pages and referral sources | Up to 2 weeks |
| Meta (Facebook) |
_fbp, _fbc, fr
|
Deliver and measure advertising campaigns | Up to 3 months |
| Google / others | Advertising and conversion tracking cookies | Measure ad performance | Varies |
The specific cookies and providers used on our Website may change over time. Our consent management platform presents the current, detailed list of cookies at the time you make your choice, and you can review or change your choices at any time (see Section 5).
4. Third parties and international transfers
We share cookie data with the following categories of third parties: Shopify (e-commerce platform, hosting, analytics, payments), payment providers, analytics providers (e.g. Google Analytics), advertising and marketing partners (e.g. Meta, Google Ads, TikTok), and social media platforms where you use their widgets or login integrations.
Some of these providers (for example Shopify, Google, Meta) may store or process data in countries outside the EEA or the UK, including the United States and Canada. Where we transfer personal data to such countries, we rely on appropriate safeguards such as the European Commission's adequacy decisions or Standard Contractual Clauses (SCCs), as required by the GDPR / UK GDPR. You may request a copy of the relevant safeguards by contacting us (Section 9).
5. Your choices and how to manage cookies
Consent. When you first visit our Website, a cookie banner will ask for your consent to use non-essential cookies. You can accept all cookies, reject all non-essential cookies, or select your preferences by category. Essential cookies are always active and do not require consent.
Withdraw or change consent. You can withdraw or change your consent at any time by opening the cookie preferences (the "Cookie settings" / "Manage cookies" link, available in the footer of our Website) and adjusting your choices. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Browser controls. You can also control and delete cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may prevent parts of the Website from functioning properly (for example, you may not be able to complete a purchase). For guidance, please refer to the "Help" section of your browser (Chrome, Firefox, Safari, Edge, etc.).
Global Privacy Control (GPC). Where required by applicable law, if you visit our Website with the Global Privacy Control opt-out preference signal enabled, we will treat this as a request to opt out of the sale or sharing of your personal data for targeted advertising for that device and browser. We do not otherwise respond to browser "Do Not Track" signals. For more information, visit <https://globalprivacycontrol.org/>.
Opt-out of targeted advertising. You can also opt out of the use of your information for targeted advertising and of the "sale" or "share" of your personal data at any time via our data sharing opt-out page: <https://www.mdhand.com/pages/data-sharing-opt-out>.
6. Data retention
Cookie-related personal data is retained only for as long as necessary for the purposes described in this policy, and in line with the storage durations set out above. Individual cookies expire automatically according to their duration and may be deleted by you at any time. Aggregate or anonymised statistics may be retained longer.
7. Your data protection rights
Under the GDPR / UK GDPR, you have the following rights in relation to the personal data we hold about you:
- The right of access to your personal data;
- The right to rectification of inaccurate data;
- The right to erasure ("right to be forgotten");
- The right to restriction of processing;
- The right to data portability;
- The right to object to processing based on legitimate interests;
- The right to withdraw consent at any time (for consent-based cookies); and
- The right to lodge a complaint with a supervisory authority (for example, the data protection authority in your country of residence or establishment).
To exercise any of these rights, please contact us using the details below.
8. Children
Our Website is not directed at children under the age of 16, and we do not knowingly collect personal data from children through cookies or otherwise. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Contact
For any questions about this Cookie Policy or to exercise your rights, please contact us:
MDHAND (data controller)
Email: mdhandpro@gmail.com
Address: 61 Bridge Street, Kington, WLS, HR5 3DJ, GB
10. Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in technology, law or our practices. We will post the updated version on this page and update the "Last updated" date. If the changes are material, we will provide a prominent notice on the Website as required by applicable law.
*This Cookie Policy should be read together with our Privacy Policy.*