Cookie Policy

    Last updated: 14 October 2026

    What runs on this site, what's optional, and how to change your mind.

    This page explains the cookies and similar technologies on enhancedmen.co.nz: what runs for every visitor, what runs only if you say yes, what each tool sends and who receives it, and how to change your choice. It sits alongside our Privacy Policy, which explains how Enhanced Men handles your personal and health information more broadly.

    At a glance

    • Some things run for every visitor, without asking: our website host and the Acuity booking calendar, which the site needs in order to work, and Cloudflare Web Analytics and our own visit counters, which only count visits.
    • Two optional tools, Meta Pixel and Google Ads, load only if you choose Accept. If you choose Decline, or don't choose, they don't load. They never load on our self-check pages (the symptom self-check, the hair transplant readiness check, the Norwood stage check and the athlete bloods check), whatever you chose, so the fact that you used one is never sent to Meta or Google.
    • If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a no and don't ask.
    • You can change your choice at any time using Cookie settings at the bottom of every page.
    • The optional marketing box on the booking form is separate from these tools and from your cookie choice. Our Privacy Policy explains it.

    What is a cookie?

    A cookie is a small text file that a website stores in your browser. Similar technologies, such as browser storage, pixels and tags, also let a website or service recognise your browser or send information about your visit. This policy treats them all the same way.

    When we ask

    • On your first visit, a short banner asks whether you're happy for us to use the two optional tools. It appears once you start scrolling or use your keyboard, rather than as soon as a page opens, and not while the booking section is on your screen.
    • Nothing optional loads until you choose. Ignoring the banner, or leaving the site, counts as no.
    • We remember your choice for 12 months and then ask again.
    • If we add an optional tool, or change what one receives, we'll ask you again.
    • If your browser sends a Global Privacy Control or Do Not Track signal, you won't see the banner and the optional tools stay off.

    What runs for every visitor

    Our website host

    Our site is hosted by Netlify. Like any website host, it receives the standard details your browser sends with each request, such as your IP address, browser type and the page you asked for, so it can deliver the site and keep it secure. It doesn't set cookies for visitors.

    Cloudflare Web Analytics

    Cloudflare Web Analytics counts page views and visits and measures how quickly pages load, so we can see which pages people use and fix slow ones. It records the page address, the website you came from, your country, and your device type, browser and operating system. It doesn't use cookies or browser storage, and Cloudflare says it doesn't fingerprint visitors, doesn't track individual visitors across sites and doesn't collect or use visitors' personal data. Because of that we run it for everyone.

    Our own visit counters

    Our server keeps simple daily totals of page views, a few steps on the way to booking, and visits that arrive from an AI assistant such as ChatGPT, along with which of our pages each happened on. For example: how many times the booking calendar was viewed or loaded, a booking button was clicked, a booking was completed, one of our self-checks was started or finished (and which result it gave), or someone clicked through to Gro Clinics. We use them to see where visitors drop out before booking. The totals contain no cookies, no IP addresses, no device details, and no names or contact details, and we don't link them to your name, your booking or your health record. We never pass the totals themselves to Google, Meta or any other advertiser; what the two optional tools receive if you choose Accept is described below.

    Links to Gro Clinics

    Links from our site to Gro Clinics carry tags that tell Gro Clinics the visit came from enhancedmen.co.nz, and from which of our pages. The tags carry our site name, the page you clicked from and a fixed campaign label. They carry no name, contact detail or cookie.

    The booking calendar

    Our booking calendar is provided by Acuity Scheduling, a Squarespace company, and appears inside our pages. In most browsers it loads as you scroll towards it. To take bookings securely it uses its own services, including Google reCAPTCHA to block automated bots and Stripe to take payments. These services may set their own cookies or similar storage and receive technical details about your browser, under their own privacy policies. You need them to book, so they don't depend on your cookie choice.

    When you complete a booking, Acuity passes our site a booking reference and the price, so we can count the booking. If you've chosen Accept, we also report the booking to Meta and Google, as described below. What you enter in the booking form is covered by our Privacy Policy. If you open the calendar in its own tab, Acuity's own website and cookie practices apply while you're there.

    Your cookie choice

    We store your choice in your browser's local storage, under the name em-consent-v2. It records only whether you said yes or no, and when. It isn't a cookie, it isn't sent to us or anyone else, and it contains nothing that identifies you. How long we keep it is explained under When we ask.

    What runs only if you choose Accept

    Because we're a men's health clinic, the pages you look at, or the fact that you booked, can say something about your health. That's why these two tools stay off unless you choose Accept. If you do, Meta and Google receive the information below directly from your browser, and Meta also receives it from our server.

    Meta Pixel (Meta)

    Why we use it: to measure any ads we run on Facebook and Instagram, so we can see whether they lead to visits and bookings. We don't use it to build advertising audiences.

    What Meta receives:

    • the address of each page you view on our site, except our self-check pages, where the pixel never loads;
    • when you click a booking button or reach the booking section;
    • when a booking is completed, with its price and a scrambled booking code;
    • your IP address, browser and device details, and Meta's cookie IDs (below).

    We've switched off the pixel's automatic collection of button clicks and page details. Like any web request, the pixel also sends standard browser information, including the site that referred you, and carries any Meta cookies already in your browser, which can let Meta connect the visit to your Facebook or Instagram account if you're signed in there.

    Also from our server: so measurement still works if your browser or an ad blocker stops the pixel from loading, our server sends Meta the same events directly (through Meta's Conversions API), with your IP address, browser details and Meta cookie IDs. This happens only if you've chosen Accept.

    Cookies: _fbp, which identifies your browser to Meta, and _fbc, which records that you arrived by clicking a Meta ad (kept for 90 days).

    Meta's own use: Meta also uses this information for its own purposes, including preparing reports for advertisers, improving how ads are delivered, and personalising the ads and content it shows people. See Meta's Privacy Policy.

    Google Ads (Google)

    Why we use it: to see whether our Google ads lead to bookings. We don't use it to build advertising audiences, and we've set it so that visits to our site aren't used to personalise ads.

    What Google receives:

    • the address of each page you view on our site, except our self-check pages, where the tag never loads;
    • when a booking is completed, with its price and a scrambled booking code;
    • your IP address, browser and device details, and Google's cookie IDs — those below, plus any Google cookies already in your browser, which can let Google connect the visit to your Google account if you're signed in.

    Cookies: _gcl_au, plus _gcl_aw or _gcl_dc if you arrived by clicking a Google ad. Google lists each as lasting 90 days.

    Google's own use: Google also uses information from sites that use its advertising services to maintain and improve its services, measure ads, and protect against fraud and abuse. We've set our Google tag to tell Google not to use visits to our site to personalise ads, and not to join a visit to a signed-in Google account for advertising; Google says such events may still be used for demographics and interests reporting. See How Google uses information from sites or apps that use its services.

    From June 2026 until 17 September 2026 a third optional tool, Microsoft Clarity, recorded how our pages were used (scrolling, clicks and taps). We have removed it and deleted the Clarity project and everything it held; Microsoft says deleted project data cannot be recovered.

    What we don't do

    • We don't sell your information or share it with data brokers.
    • Neither of these two tools receives your name, email address, phone number, or anything you type into our forms.
    • We never send your symptoms, self-check answers or result, test results, diagnosis or medicines to Meta or Google.

    Your contact details and the booking form

    Neither of the two optional tools on this page receives your name, email address or phone number. Separately, the Terms and Conditions step of our booking form has an optional marketing tick box, which says your contact details may be used to manage our advertising via Google and Meta. Ticking it is a separate choice, so it doesn't depend on your cookie choice or on a Global Privacy Control or Do Not Track signal from your browser. What it allows, what would be sent, and how to withdraw are in our Privacy Policy.

    Changing your mind

    • Choose Cookie settings at the bottom of any page to see your current choice and change it.
    • If you switch from Accept to Decline, we delete the cookies these tools set on our own domain (_fbp, _fbc, _gcl_au, _gcl_aw and _gcl_dc) and reload the page without them. We can't delete cookies the companies set on their own domains, or recall information they've already received. You can clear their cookies in your browser settings, and each company's privacy policy explains your options with them.
    • Clearing this site's data in your browser also resets your choice, so we'll ask again.
    • If your browser sends a Global Privacy Control or Do Not Track signal, Cookie settings shows a note instead of the buttons and the optional tools stay off. To use them, you'd need to turn that signal off.
    • If you block all cookies in your browser, the booking calendar may not work.

    How long things last

    • Your cookie choice: 12 months, then we ask again.
    • Google's _gcl_au, _gcl_aw and _gcl_dc cookies and Meta's _fbc cookie: 90 days.
    • Other cookies set by Meta, Squarespace, Google reCAPTCHA and Stripe: set by those companies; their policies give the details.
    • Our visit counters: daily totals that contain no names, contact details, IP addresses or cookies. We keep them for as long as they help us run the site; there is no automatic deletion date.

    Companies involved and their privacy policies

    Your privacy rights

    Under the Privacy Act 2020 and the Health Information Privacy Code 2020, you can ask us for the personal information we hold about you and ask us to correct it. If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909. Our Privacy Policy has the details.

    Contact

    For anything in this policy, email info@enhancedmen.co.nz. Enhanced Men, Mount Eden, Auckland.