Legal
Cookie policy
The short version: nothing is set until you say so. Decline and the analytics script is never loaded at all — not blocked, not deferred, never added to the page. No advertising or profiling cookies exist here under any circumstances.
Last updated July 2026
- Before you accept
- No cookies, no scripts, no third parties.
- If you accept
- Google Analytics 4 only, with your address anonymised.
- Advertising
- None, ever — consent or not.
- Declining
- The script is never loaded, not merely blocked.
Draft — not reviewed by counsel
This text was drafted to the right structure and describes how PharmeXa actually works, but it has not been through legal review. It should not be relied on as it stands, and must be reviewed before the site goes live.
What this site sets
Nothing, until you say otherwise. Arrive on this site and no cookies are set, no analytics script is loaded and no third party is contacted. You are asked once whether you are willing to be counted; if you decline, or simply ignore the question, that state never changes.
There are no advertising cookies and no profiling cookies here under any circumstances, consent or not. Fonts are served from this domain rather than from a third-party font service, so loading a page does not announce your visit to anyone else. There are no embedded videos, no chat widgets, no social buttons that phone home, and no tag manager waiting to be filled with tags later.
Analytics, and the choice you are given
We use Google Analytics 4 to understand which pages are useful — which reports people look at, which questions get opened, where visitors give up. That is the only measurement on the site. There is no session recording, no heatmapping and no advertising integration.
It is loaded on these terms, and they are the point of this section:
- Nothing loads until you accept. Declining does not merely stop a cookie being written — the Google Analytics script is never added to the page at all. There is no pre-ticked box, no “legitimate interest” carve-out, and no close button that quietly counts as agreement.
- Your address is anonymised before it reaches Google, set explicitly on our side rather than left to a default that could change.
- Declining is remembered, so you are not asked again on every page. That preference is stored in your browser’s local storage on this domain, not sent anywhere.
If you accept, Google Analytics sets its own cookies (`_ga` and related) to tell one visit from another. To change your mind, clear this site’s data in your browser and the question will be asked again.
Strictly necessary storage
Your answer to the analytics question is itself stored on this domain, so we do not ask again on the next page. That is strictly necessary in the ordinary sense — it exists only to honour a preference you expressed — and storage of that kind does not require consent under the ePrivacy rules or their Indian equivalents. It is a single value in local storage, not a cookie, and it is never transmitted.
Server logs
Serving a web page necessarily involves the server seeing the request. Standard request information — IP address, user agent, the page requested, the time — is produced by that act and is used for security and for diagnosing faults. This is not a cookie and cannot be used to follow you across other sites, but it is data about you, so it is named here rather than left out on a technicality. Retention is covered on the security page.
The platform itself
This policy covers the public website. The PharmeXa application, which customers sign in to, is a different system: it uses a session cookie to keep you signed in between requests. That cookie is strictly necessary — without it there is no way to stay logged in — and it is described in the application’s own documentation, which customers receive at onboarding.
The application sets no advertising or profiling cookies either. What it records about user activity is the audit trail — who submitted a statement, who approved it, and when — which exists so figures can be traced to a person, and is covered by the privacy policy.
Do Not Track and Global Privacy Control
A Global Privacy Control signal is treated as a decline, and analytics is not loaded — you do not have to answer the question separately. Do Not Track is honoured the same way. Since nothing loads before an explicit acceptance in any case, the practical effect of both signals is that the question simply never results in a script.
Changes to this policy
This page is the record of what the site does. If we add anything that stores or reads information on your device, this page changes first and the date at the top changes with it. Questions: ankur.patel@pharmexa.in.
Questions about any of this?
Legal and data questions go to the same address as everything else, and get a real answer from a person rather than a form response.
ankur.patel@pharmexa.inThe other policies
Also relevant: security and data handling, which states where data is hosted, how it is encrypted and how long it is kept.