BOOK NOW

Legal

Cookie Policy

What cookies and similar technologies run on brazeliamedspa.com, what each one does, and how to control them.

Effective September 13, 2026Last updated September 13, 2026

1. What Cookies Are

A cookie is a small text file a website stores on your device so it can recognize your browser on a later page or visit. Cookies do things like keep you logged in, remember a preference, keep a form secure, or count visitors.

Throughout this policy, “cookies” also covers similar technologies that do comparable things: pixels and tags (tiny transparent images or snippets of code that record that a page loaded), web beacons, local storage and session storage (data held in your browser rather than in a cookie file), software development kits, and server logs.

2. First-Party, Third-Party, Session and Persistent

3. The Categories We Use

Category What it means Can you switch it off?
Strictly necessary Required for the website to work, to keep it secure, to prevent spam and fraud, and to let you submit a form or book an appointment. Without these the site does not function. No. Blocking them will break the site.
Performance and analytics Help us understand, in aggregate, how many people visit, which pages they read and where they arrive from, so we can improve the site. Yes. See sections 7 and 8.
Functional Enable optional features such as live chat, and remember choices you make so you do not have to repeat them. Yes, but the feature will stop working.
Targeting and advertising Used to build a profile of your interests and show you advertising across other websites. We do not use any. See section 6.

4. Cookies On This Website

This is what actually runs on brazeliamedspa.com. Names and lifetimes are set by the providers and can change when they update their software; we review this table periodically.

Strictly necessary

Name Set by Purpose Lifetime
wordpress_test_cookie This website (WordPress) Checks whether your browser accepts cookies. Session
wordpress_logged_in_*, wordpress_sec_* This website (WordPress) Keeps a signed-in user authenticated. Set only for staff accounts, never for ordinary visitors. Session to 14 days
wp-settings-*, wp-settings-time-* This website (WordPress) Remembers admin screen preferences. Staff accounts only. 1 year
Form security token This website (Forminator) Protects the contact form against cross-site request forgery and duplicate submission. Session
Page cache identifiers This website (WP Fastest Cache / Super Page Cache) Tells the cache whether to serve a stored copy of a page or a fresh one. Session to 1 day
__cf_bm Cloudflare Distinguishes humans from bots so that malicious traffic is blocked. 30 minutes
_cfuvid Cloudflare Supports rate limiting. Stores no personally identifiable information. Session
cf_clearance Cloudflare Records that your browser passed a security challenge so you are not challenged repeatedly. Up to 1 year
cf_chl_* and related Cloudflare Turnstile Runs the anti-spam check on our contact form and records the result. Turnstile is a privacy-preserving alternative to traditional CAPTCHA; it does not track you across websites and does not serve advertising. Minutes, per challenge

Performance and analytics

Name Set by Purpose Lifetime
Google tag (GT-WF7XSQNN) Google Loads our measurement tag. We use it to understand aggregate site usage. n/a — loads the cookies below
_ga Google Analytics Assigns a randomly generated identifier to distinguish one browser from another so visits can be counted. Up to 2 years, shortened by some browsers
_ga_* Google Analytics Maintains the state of an individual analytics session. Up to 2 years
_gid Google Analytics Distinguishes browsers over a short window. May appear depending on configuration. 24 hours

Google processes this data as our service provider. We do not link analytics data to your medical record, and we do not use it to identify you individually.

Functional

Name Set by Purpose Lifetime
__tawkuuid Tawk.to (live chat) Recognizes a returning chat visitor so a conversation can continue rather than restart. 6 months
TawkConnectionTime Tawk.to Records when the chat widget connected, to maintain the session. Session
ss, twk_uuid_*, twk_idm_key Tawk.to Session and local-storage entries that keep the chat widget working and hold the transcript of your current conversation. Session to 6 months
Local storage entries This website (Elementor, Amelia booking) Remember interface state, such as a step in the booking flow. Held in your browser and not transmitted to us. Until cleared

If you open the live chat, anything you type is sent to Tawk.to as our service provider and is handled under their privacy policy as well as ours. Please do not type medical details into live chat — see our Privacy Policy.

Fonts and content delivery

Some pages load fonts and code libraries from content delivery networks, including fonts.googleapis.com, cdn.jsdelivr.net and unpkg.com, and some images from Gravatar and Unsplash. These requests reveal your IP address to those providers so the file can be delivered to you. They do not set advertising cookies.

5. Our Limits on Health-Related Tracking

We treat this as more than a formality. The pages you read on a medical practice’s website can reveal something about your health, and we do not think that information belongs to advertisers.

We commit to the following, and we hold our vendors to it:

  • No third-party advertising or retargeting trackers anywhere on this website. There is no Meta/Facebook pixel, no TikTok pixel, no LinkedIn Insight tag, no advertising conversion pixel, and no data-broker tag.
  • No analytics, chat or advertising tag is permitted to capture what you type into a form. Form field contents are not sent to any analytics or advertising provider.
  • We do not use session-replay or screen-recording tools that reconstruct your visit.
  • We do not share, sell or license browsing data that indicates an interest in a treatment, condition or service to any advertising network, data broker or other third party.
  • We do not collect precise geolocation.
  • If we ever introduce advertising measurement, we will do it in a way that does not transmit treatment-specific page paths or form data, we will update this policy first, and we will implement a consent banner before any such tag fires.

6. What We Do Not Do

7. How to Control Cookies

Because we run no advertising trackers, the technologies on this site are limited to those that keep it working and secure, plus aggregate analytics and live chat. You can still switch off everything except the strictly necessary ones.

In your browser

Every major browser lets you see the cookies a site has set, delete them, block third-party cookies, block all cookies for a site, or clear everything when you close the browser. Instructions:

Blocking strictly necessary cookies will stop the contact form, the booking tool and the security check from working.

Private browsing

Opening this site in a private or incognito window keeps cookies only for that window and discards them when you close it. If you would rather your visit left no trace on a shared device, this is the simplest option.

On your phone or tablet

Both iOS and Android let you reset or delete your advertising identifier and limit ad tracking, in Settings under Privacy. We do not use advertising identifiers, but the setting applies across all apps and sites.

Turning off live chat

The chat widget only sets its cookies once it loads. Blocking third-party cookies, or using an ad or tracker blocker, will prevent it. You can always reach us by telephone, email or the contact form instead.

8. Third-Party Opt-Outs

9. Global Privacy Control and Do Not Track

Some browsers and browser extensions send a Global Privacy Control (GPC) signal, which tells every website you visit that you opt out of the sale or sharing of your personal information. We treat a GPC signal as a valid opt-out request and honor it. Because we do not sell personal information and run no advertising trackers, there is nothing for it to disable — but we honor it as an instruction rather than ignoring it. A GPC signal applies only to the browser and device that sends it, so set it on each one.

Older Do Not Track browser settings never acquired an agreed technical standard and are interpreted inconsistently across the web. We do not respond to Do Not Track signals. The GPC signal above is the mechanism we honor.

This Cookie Policy is part of, and should be read with, our Privacy Policy and Notice of Privacy Practices and our Terms and Conditions. If this Cookie Policy conflicts with the Notice of Privacy Practices in relation to your protected health information, the Notice of Privacy Practices controls.

11. Changes to This Cookie Policy

We will update this policy when the technologies on our website change, and we will change the “Last updated” date at the top. If we ever add a category of tracking we do not use today — advertising or targeting in particular — we will update this policy and implement a consent mechanism before that tracking goes live.

12. Contact Us

Brazelia MedSpa & Integrative Wellness

101 Plaza Real South, Suite G
Boca Raton, FL 33432

Telephone 561.353.2265  ·  Email drb@brazeliamedspa.com

Questions about a specific cookie, or something you have seen in your browser? Ask us — we will tell you what it is.