Cookie Policy
A PECR-compliant cookie policy for Capsules.com explaining what cookies are, the distinction between strictly necessary cookies (no consent required) and non-essential cookies (consent required), the specific cookies in use, and how visitors can control them.
Draft — pending legal review
This is placeholder content prepared for internal review and is not legal advice. It must be reviewed and approved by a qualified legal professional before publication. Items marked [PLACEHOLDER] require specific information.
Last updated: 22 June 2026
Introduction
This Cookie Policy explains how Capsules UK Ltd ("Capsules", "we", "us" or "our") uses cookies and similar technologies on the Capsules.com website and customer portal (together, the "Site"). It should be read together with our Privacy Policy, which explains how we handle personal data more generally.
Capsules.com is a business-to-business trade site for empty two-piece HPMC and gelatin capsules. The Site comprises a public marketing website and a private customer portal that approved trade customers sign in to. This policy applies to both.
We use cookies in accordance with the Privacy and Electronic Communications Regulations 2003 ("PECR") and the UK General Data Protection Regulation ("UK GDPR"). The Information Commissioner's Office ("ICO") is the UK supervisory authority for these rules.
Capsules UK Ltd is a company registered in England and Wales (company number [PLACEHOLDER: registered company number]), with its registered office at [PLACEHOLDER: registered office address]. Our ICO registration number is [PLACEHOLDER: ICO registration number].
What Are Cookies?
A cookie is a small text file that a website places on your device (computer, tablet or mobile phone) when you visit it. Cookies allow the website to recognise your device, remember your preferences, keep you signed in, and operate securely. They are widely used to make websites work, or to work more efficiently.
Cookies set by the website you are visiting are called "first-party" cookies. Cookies set by a domain other than the one you are visiting are called "third-party" cookies. Cookies may also be "session" cookies, which are deleted when you close your browser, or "persistent" cookies, which remain on your device until they expire or you delete them.
We also use the word "cookies" in this policy as shorthand for similar technologies that store or access information on your device, such as local storage and tokens used to keep you signed in to the customer portal.
Consent And The Different Types Of Cookie
Under PECR, the rules that apply to a cookie depend on what the cookie does. There are two broad categories that matter for consent.
- Strictly necessary cookies. These are essential for the Site to provide a service that you have specifically requested — for example, signing you in to the customer portal and keeping your session secure. Under PECR, strictly necessary cookies do not require your consent, because without them the service you asked for cannot be delivered. They cannot be switched off through a consent banner.
- Non-essential cookies. These include functional, analytics, performance and advertising cookies. They are not strictly required to deliver the service you requested, so under PECR we may only set them with your prior consent. Where we use any such cookies, we will ask for your consent first and you can withdraw it at any time.
At present, the only cookies we use are strictly necessary cookies and a small number of functional preference cookies described below. We do not use advertising or marketing cookies, and analytics has not yet been deployed on the Site. If this changes, we will update this policy and, where required, request your consent before any non-essential cookies are set.
Cookies We Use
The table below lists the cookies and similar technologies currently used on the Site, what they do, their category, and how long they last. Some details, such as exact cookie names and durations set by our authentication provider, may vary as that provider updates its software.
| Cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Supabase authentication cookies (e.g. sb-access-token, sb-refresh-token) | Supabase (our authentication and database provider, acting as our processor) | Sign approved trade customers in to the customer portal, maintain and refresh a secure authenticated session, and protect against unauthorised access. Without these cookies the portal cannot keep you signed in. | Strictly necessary (first-party) | Session and short-lived persistent tokens; the refresh token typically persists until you sign out or it expires (commonly up to around [PLACEHOLDER: refresh token lifetime, e.g. 30 days]). |
| capsules_session | Capsules.com (first-party) | Maintains your signed-in state and supports secure session handling across the portal. | Strictly necessary (first-party) | Session, or until you sign out [PLACEHOLDER: confirm exact duration if persistent]. |
| region | Capsules.com (first-party) | Remembers your chosen regional site (for example UK or US) so you are routed to the correct regional content and are not repeatedly asked to choose. | Functional (first-party) | Persistent – up to [PLACEHOLDER: region cookie duration, e.g. 12 months]. |
| cc | Capsules.com (first-party) | Stores a detected country code so we can suggest the most relevant regional site (for example prompting UK visitors to switch to the UK site). Used for routing only. | Functional (first-party) | Persistent – up to [PLACEHOLDER: cc cookie duration, e.g. 12 months]. |
The region and cc cookies are functional cookies that improve your experience by routing you to the appropriate regional site. They do not track you across other websites and are not used for advertising. We treat them as low-risk functional cookies; where your local rules require consent for such cookies, we will obtain it before setting them.
Cookies We Do Not Use
We want to be clear about what we do not do. We do not use advertising, marketing, retargeting or behavioural-tracking cookies of any kind. The public website is a B2B information resource and does not operate as an online shop, so we do not use cookies for retail-style targeting, basket, checkout or promotional purposes.
Analytics cookies have not yet been deployed on the Site. If we introduce analytics or any other non-essential cookies in the future, we will update this policy, identify the relevant cookies in the table above, and where the law requires it we will ask for your consent before those cookies are set.
How To Manage And Control Cookies
You can control and delete cookies through your web browser settings. Most browsers let you see what cookies are stored, delete them individually or in bulk, and block cookies from some or all websites. You can usually find these controls in your browser's "Settings", "Preferences" or "Privacy" menu.
Please note that strictly necessary cookies cannot be refused if you wish to use the customer portal. If you block or delete the authentication and session cookies, you will not be able to sign in or stay signed in, and parts of the portal will not function. If you block the region and cc preference cookies, the Site will still work, but you may be asked to choose your region more often.
Guidance on managing cookies in the most common browsers is available from the browser providers directly:
- Google Chrome – see Chrome's "Clear, allow and manage cookies" help pages.
- Mozilla Firefox – see Firefox's "Cookies" help pages.
- Apple Safari – see Safari's "Manage cookies" help pages.
- Microsoft Edge – see Edge's "Delete and manage cookies" help pages.
You can also find independent, plain-English guidance on cookies and how to manage them on the ICO website (ico.org.uk) and at aboutcookies.org. If we introduce a cookie consent tool in the future, you will additionally be able to review and change your non-essential cookie preferences through that tool at any time.
Changes To This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes to our Site or services, or changes in the law or guidance. When we make material changes, we will update the "last updated" date below and, where appropriate, bring the changes to your attention.
We encourage you to review this policy periodically so that you stay informed about how we use cookies. Your continued use of the Site after any update means you are aware of the current version of this policy, although it does not replace any separate consent we are required to obtain for non-essential cookies.
This Cookie Policy is governed by the laws of [PLACEHOLDER: governing law and venue, e.g. England and Wales]. This document is placeholder content and must be reviewed by a qualified legal professional before publication.
Contact Us
If you have any questions about this Cookie Policy or about how we use cookies and similar technologies, please contact us using the details below.
- Data controller: Capsules UK Ltd
- Registered office: [PLACEHOLDER: registered office address]
- Company number: [PLACEHOLDER: registered company number]
- Email: [PLACEHOLDER: contact / data protection email]
- Data protection contact / DPO: [PLACEHOLDER: DPO or data protection contact name and email, if appointed]
- ICO registration number: [PLACEHOLDER: ICO registration number]
If you are not satisfied with how we have handled a query about cookies or your personal data, you have the right to lodge a complaint with the ICO, the UK supervisory authority, at ico.org.uk or by calling its helpline. We would, however, appreciate the chance to address your concerns before you approach the ICO.
Last updated: [PLACEHOLDER: date of last update].