Legal
Cookie policy
Last updated 15 September 2026
Last updated: 4 September 2026. This page explains which browser storage and measurement services Romania Dental Tourism uses, when they can run and how you can change your choice.
Your choice comes first
Essential storage is used to remember your privacy choice and to keep forms and the website secure. Statistics and Marketing are optional. Their scripts are not requested from the providers until you enable the matching category. Rejecting non-essential cookies keeps both categories off.
The Cookie settings button in the footer reopens the controls at any time. You can allow Statistics without allowing Marketing, allow both, or reject both.
Essential
The site stores a small local preference named bsCookieConsentV2. It records the version of the privacy controls and whether Statistics and Marketing are allowed. It does not contain your name, contact details or enquiry. WordPress, the hosting platform and security tools may also use short-lived technical storage where this is necessary to provide a form, protect the site or show the correct page.
Statistics, only with permission
Google Analytics 4
Google Analytics 4 helps us understand aggregate visits and which parts of the website are useful. After the website has accepted and stored a valid enquiry, it may also record the broad event generate_lead. Selecting a WhatsApp link is recorded separately as whatsapp_click and is not treated as a qualified lead. Google advertising and personalisation signals are denied by default. When Statistics is allowed, Google Analytics may use _ga and a property-specific _ga_… cookie to distinguish a browser and maintain a session. These can remain for up to two years unless you remove them sooner. Google explains its use of cookies in its cookie notice.
PostHog
PostHog provides a second aggregate check of page visits, confirmed enquiry completions and WhatsApp selections. Standard analytics is memory-only. The optional 30-day internal-analysis identifier requires separate consent. Session recording, heatmaps, automatic event collection and automatic error capture remain disabled. We send only a broad page group, the fixed event names generate_lead and whatsapp_click, and a fixed broad form name after a valid enquiry has been stored. Exact page URLs, search terms, page titles, referrers and anything entered into a form are excluded.
Microsoft Clarity
The standalone Romania Dental Tourism Clarity project provides heatmaps and session playback only after Statistics permission. The whole page, every form and every form field are masked before it loads. Our adapter sends only fixed, allowlisted event names and no form values, contact details, treatment or health information, custom properties, URL parameters or fragments. Withdrawing Statistics permission clears its first-party cookies and prevents the recorder from loading again.
These statistics services do not receive your name, email address, phone number, message, chosen treatment, photographs, X-rays or clinical history from our enquiry forms. A successful enquiry is counted only as an aggregate conversion after the website has accepted and stored it.
Marketing, only with separate permission
Google Ads conversion measurement
When Marketing is allowed, a server-verified enquiry may be reported to Google Ads as an aggregate conversion. Google Analytics records its separate generate_lead event only when Statistics is allowed. Google Analytics audience import, personalised advertising signals, Enhanced Conversions and user-provided data collection are disabled. No enquiry field, contact detail, treatment choice, photograph, X-ray or clinical information is attached to either event.
Meta Pixel
Meta Pixel is used to measure consented page visits from Facebook or Instagram activity. The site also sends broad Contact and Lead event names without custom parameters, but Meta’s health and wellness controls may block those lower-funnel events. It loads only after Marketing is enabled. Core Setup is on, automatic events and automatic advanced matching are off, and Meta’s traffic allow list is restricted to this domain. We do not give Meta any enquiry fields, contact details, link destinations, photographs, X-rays or clinical information. Meta may set a first-party browser identifier such as _fbp after consent. Meta describes this technology in its cookie policy.
Microsoft Advertising UET
Microsoft Advertising Universal Event Tracking tag 343264930 measures page visits and a confirmed enquiry as the broad event generate_lead. The UET script is not requested until Marketing is enabled. Consent Mode defaults advertising storage to denied and the site passes the current Marketing choice when the tag starts or when a choice changes. Clarity is disabled inside this UET tag and runs separately under Statistics permission.
After Marketing permission, Microsoft UET may use identifiers including _uetvid, _uetsid, _uetmsclkid and MUID for campaign attribution and sessions. The separate Clarity project may use _clck and _clsk after Statistics permission. We do not send names, contact details, messages, requested treatments, photographs, X-rays or clinical information from our enquiry forms, and Enhanced Conversions is disabled. Microsoft explains its processing in the Microsoft Privacy Statement.
After Statistics permission, Google Analytics and PostHog measure a WhatsApp selection with the exact event name whatsapp_click. After Marketing permission, Microsoft UET uses the same event name and Meta uses its standard Contact event. A WhatsApp selection is not sent as a Google Ads conversion or counted as a qualified lead. These events record only that the link was selected and do not include the phone number, message, link destination, page text or any form value.
Server logs and external links
Separately from optional measurement, the web server keeps standard security and access logs. Links to WhatsApp, airlines, accommodation providers and other external websites take you to services with their own privacy and cookie controls. We do not control their storage once you leave this website.
Questions
Questions about these controls can be sent to hello@romaniadentaltourism.co.uk. How we handle information that you deliberately send in an enquiry is explained in the privacy policy.
Optional PostHog internal analysis
Updated 15 September 2026. Statistics consent alone does not enable this option. If you separately select internal journey analysis and save your choice, we use a random browser identifier on this website to count repeat activity, broad interactions and a form start followed by an observed successful submission within 24 hours. This is internal website analysis, not advertising targeting or evidence of a booking. Refusing it does not affect your enquiry.
The local-storage entries seo_control_ph_journey_choice_v1 and seo_control_ph_journey_id_v1 expire 30 days after your explicit choice. Normal visits do not extend them. Each website has its own identifier; we do not match you across our websites or devices. Linked events use only broad home, contact, legal or other-content categories and fixed interaction/form labels, without names, contact details, exact URLs, treatment choices, message contents or files. PostHog EU Cloud processes these events in Frankfurt. Replay, automatic capture, person profiles and advertising exports are disabled.
We analyse a rolling period of up to 12 months. Browser expiry or withdrawal stops future linkage and clears the local identifier; it does not delete earlier server events. PostHog documents one year of event storage on Free plans and seven years on paid plans, with deletion enforcement rolling out separately. Our project settings do not expose their event-retention or enforcement values, so we cannot promise automatic deletion at one year. See PostHog event retention.
To withdraw, reopen Cookie settings or Manage cookies, untick internal journey analysis and save; rejecting Statistics also withdraws it. To request access or deletion, use the privacy contact shown in this policy and mention PostHog internal analysis. We will assess the request and coordinate with PostHog where needed; we may be unable to locate anonymous events once their random browser identifier is no longer available. Withdrawal is not a completed server-erasure request. Do not send dental records or other health information for an analytics request.
ChatGPT Ads conversion measurement
Updated 7 September 2026. With your Marketing consent, this website can send OpenAI the fact that a WhatsApp or email button was clicked. A click does not mean a message was sent or an enquiry was received. Measurement is separate from the information you choose to send us.
Our server sends only the generic click-event name, a random event identifier, the event time, this website’s home address and, when available after consent, the OpenAI ad-click reference. We do not send form contents, names, email addresses, phone numbers, uploaded files, health information, treatment-page addresses, page titles, referrers or your browser IP address or user agent. The OpenAI browser SDK and automatic customer-data matching are not used. Each event is opted out of future user-level personalisation.
If an OpenAI ad-click reference is available after consent, the first-party pfa_cg_oppref cookie can retain it for up to 30 days for attribution. It is removed when Marketing consent is withdrawn. We retain aggregate delivery counters and the latest delivery time/status, plus short-lived local duplicate-prevention and abuse-control records; no enquiry or customer record is attached. OpenAI processes received conversion events under its applicable privacy terms, including any international processing described there.
Use the website’s cookie controls to decline or withdraw Marketing consent. The website, email, WhatsApp links and enquiry form still work. No pre-consent clicks are replayed. See OpenAI’s privacy policy for its data handling and rights information.
