Cookie Policy
Sookly Cookie Policy
Effective date: 10 May 2026. This policy applies to the sookly.co website, the platform dashboard, and the embeddable Sookly chat widget.
- Effective date
- 10 May 2026
- Last reviewed
- 10 May 2026
- Applies to
- Website, dashboard, and chat widget
- Contact
- privacy@sookly.co
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website or use a web application. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect information about how you interact with the site.
Similar technologies include web beacons (pixel tags), local storage, session storage, and fingerprinting. This policy covers all such technologies collectively referred to as 'cookies.'
2. How We Use Cookies
Sookly uses cookies on the following surfaces: sookly.co, our public-facing marketing and documentation website; app.sookly.co, the platform dashboard used by clinic staff; and the embeddable chat widget installed on clinic websites.
Each surface uses a different mix of cookie types as detailed below.
3. Types of Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are essential for the platform to function. They include authentication tokens, CSRF protection tokens, load balancing, and the cookie consent record. Legal basis: legitimate interest in providing a secure and functional service. No consent required under the PDPA.
3.2 Functional / Preference Cookies
These cookies remember preferences such as language and locale, dashboard layout, notification settings, and theme selection. Retention: up to 12 months or until manually cleared. Legal basis: consent where required or legitimate interest.
3.3 Analytics Cookies
These cookies help us understand page views, session duration, navigation paths, feature usage, and error reporting. We use self-hosted or privacy-respecting analytics tools where possible. Retention: aggregated data up to 24 months and raw events 90 days. Legal basis: consent.
3.4 Third-Party / Messaging Platform Cookies
When clinics connect third-party channels, those platforms may set their own cookies. Examples include LINE LIFF or LINE Login SDK session cookies, Meta Pixel if installed by the clinic, and Telegram login widgets. Sookly does not control those cookies. Clinics are responsible for their own disclosures. Legal basis: consent managed by the clinic.
3.5 Performance Cookies
These cookies help us monitor uptime, CDN performance, API latency, and error rates. Retention: 30 days. Legal basis: legitimate interest in maintaining platform reliability.
3.6 Marketing Cookies (sookly.co only)
On the public marketing site, we may use cookies for referral source tracking and conversion tracking to understand campaign effectiveness. These are only activated with explicit consent. Retention: up to 90 days. Legal basis: consent.
4. Specific Third-Party Services
Vercel hosts the Next.js application and may collect performance and routing telemetry. See vercel.com/legal/privacy-policy.
Supabase may set session tokens in cookies to maintain authenticated sessions. These are strictly necessary cookies. See supabase.com/privacy.
Messaging platform SDKs such as LINE LIFF, WhatsApp Click-to-Chat, or similar embedded SDKs may set their own cookies when used by clinics. These are outside Sookly's control.
5. Cookie Retention Summary
Authentication tokens
Session, cleared on logout.
Preference / functional cookies
Up to 12 months.
Analytics raw events
90 days.
Analytics aggregated data
Up to 24 months.
Performance monitoring
30 days.
Marketing cookies
Up to 90 days.
Consent record
Up to 12 months to avoid re-prompting.
6. Your Cookie Choices
6.1 Cookie Consent Banner
When you first visit sookly.co or the platform dashboard, you can accept all cookies, accept only necessary cookies, or customise your preferences by category. Preferences can be changed later via Cookie Settings.
6.2 Browser Controls
Modern browsers allow you to block, clear, or alert on cookies. Blocking all cookies will break authentication and core platform functionality.
6.3 Opt-Out of Analytics
Where analytics tools support it, selecting Analytics Off in the consent manager prevents analytics cookies from being set.
6.4 Do Not Track
Where technically feasible, Sookly respects Do Not Track signals by not setting non-essential cookies when a DNT signal is detected.
7. Cookies and the Sookly Chat Widget
If you are visiting a clinic website that embeds the Sookly chat widget, the widget may set a session cookie to maintain the conversation across page navigations.
A persistent cookie may also be set to recognise returning visitors and retrieve conversation history if the clinic enables that feature.
The clinic is responsible for disclosing widget-related cookies in its own cookie notice and consent mechanism.
8. Changes to This Cookie Policy
We may update this Cookie Policy to reflect changes in technology, regulation, or our use of cookies. Material changes will be communicated through the platform or by email.
The latest version will remain available at sookly.co/cookie-policy.
9. Contact
Sookly Co., Ltd.
Website: sookly.co
Cookie / privacy enquiries: privacy@sookly.co
Address: Thailand