Legal
Cookies on this site.
Six first-party cookies, four of them necessary, listed in full below. No advertising cookies, no third-party trackers and nothing that follows you once you have left this site.
Last updated 12 January 2026
On this page
02. Our approach
We set no advertising cookies. We embed no third-party trackers, no social widgets, no session recorders and no cross-site tracking of any description. No advertising network has a view of this site, and none ever will.
The member portal uses strictly necessary cookies only. A page that shows results and imaging reports should carry nothing commercial at all, so it carries nothing.
One optional cookie pair remains, for first-party page measurement, and it is described in section 04. The site works exactly the same if you decline it.
| Name | Purpose | Type | Retention |
|---|---|---|---|
| lh_session | Keeps you signed in to the member portal for the length of a single visit. | Strictly necessary | Session |
| lh_csrf | A one-time token that stops another site submitting a portal form on your behalf. | Strictly necessary | Session |
| lh_consent | Records your answer to the cookie question so that you are not asked again. | Strictly necessary | 12 months |
| lh_locale | Remembers your preferred date and unit format if you have changed it. | Preference | 6 months |
| lh_stat | First-party page measurement. Your IP address is truncated before storage. | Analytics, optional | 30 days |
| lh_stat_ref | Records the referring site at domain level only, so we know how a page was reached. | Analytics, optional | 30 days |
04. Analytics, and how to opt out
Our page measurement is first-party and self-hosted. It counts page views and referring domains, so that we know which pages are read and which are not. The last octet of your IP address is discarded before anything is written to disk, and no device fingerprint is taken.
Measurement data is never joined to your member record, never joined to anything held in the clinical system, and never shared. It is deleted after thirty days.
Choosing “Necessary only” when the cookie question appears declines lh_stat and lh_stat_ref. Your answer is stored in lh_consent so that you are not asked again for twelve months. To change your answer, delete lh_consent in your browser and the question will be put to you again on your next visit.
05. Managing cookies in your browser
Every current browser lets you see which cookies a site has stored, delete them individually, and block them altogether. The controls sit under Settings, then Privacy, in Chrome, Safari, Firefox and Edge alike.
Blocking strictly necessary cookies will stop the member portal from keeping you signed in, and you will be asked to authenticate again on every page. Deleting cookies also removes your recorded preference, so the cookie question will reappear.
06. The member portal
Signing in to the portal sets two cookies and no others: the session cookie that keeps you signed in, and the token that protects portal forms against cross-site request forgery. Both are marked Secure, HttpOnly and SameSite=Strict, and both expire when the browser closes or after thirty minutes without activity.
Access to the portal is logged in the clinical system rather than in a cookie. What is recorded, and for how long, is set out in our privacy notice.
07. Changes to this notice
We review this notice whenever the site changes and at least once a year. The date at the top of the page shows the version in force, and earlier versions are available on request.
Contact
Written enquiries
Lucien Health Ltd
27 Harley Street
London W1G 9QD
Lucien Health coordinates and manages medical care with regulated physicians and accredited facilities. It is not an emergency service. If you need urgent help, call your local emergency number.