Cookie Policy
TranschemOnline Pharmacy — Transchem Pharmaceuticals Limited
Effective Date: March 2026 | Last Updated: March 2026
Your Privacy Matters This Cookie Policy explains what cookies and similar tracking technologies TranschemOnline uses on its website (transchemonline.co.ke) and mobile application, why we use them, and the choices available to you. This Policy is issued in compliance with the Data Protection Act, 2019 (No. 24 of 2019), the Data Protection (General) Regulations, 2021, and the Kenya Information and Communications Act (Cap. 411A). It should be read alongside our Privacy Policy. |
1. Who We Are
This Cookie Policy is issued by Transchem Pharmaceuticals Limited, trading as TranschemOnline, a company incorporated under the Companies Act, 2015 of Kenya and registered as a Data Controller with the Office of the Data Protection Commissioner (ODPC).
Trading Name | TranschemOnline |
Legal Entity | Transchem Pharmaceuticals Limited |
Physical Address | Uchumi House, Temple Lane, Nairobi, Kenya |
transchem@proton.me | |
Phone | +254 743 109 640 |
ODPC Reg. No. | TBC |
Website | transchemonline.co.ke |
2. What Are Cookies?
Cookies are small text files that are placed on your device (computer, tablet, or smartphone) when you visit a website. They are widely used to make websites work more efficiently, to remember your preferences, and to provide information to the website owner.
In addition to cookies, we may use similar technologies including:
• Web beacons (also called pixel tags or clear GIFs) — small images embedded in web pages or emails that help us track whether a page or email has been opened.
• Local storage — browser-based storage that allows us to store data on your device beyond a single session.
• Session storage — temporary storage that is cleared when you close your browser tab.
• SDKs (Software Development Kits) — used in our mobile application to collect analytics and crash-reporting data.
For the purposes of this Policy, all of the above are referred to collectively as "cookies" unless specifically distinguished.
3. Legal Basis for Using Cookies
Under the Data Protection Act, 2019, we process personal data collected through cookies on the following legal bases:
Strictly Necessary Cookies | Legitimate interest (Section 30(1)(f) DPA 2019) and/or performance of a contract — these are essential for the platform to function and cannot be disabled. |
Analytics Cookies | Consent — we will ask for your permission before placing analytics cookies on your device (Section 32 DPA 2019). |
Functional Cookies | Consent or legitimate interest, depending on the nature of the cookie. |
Marketing / Advertising | Explicit consent — we will not place marketing cookies without your clear and affirmative agreement (Section 32 DPA 2019). |
Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. See Section 8 for how to manage your preferences.
4. Categories of Cookies We Use
4.1 Strictly Necessary Cookies
These cookies are essential for you to browse the website and use its features. Without them, services such as logging into your account, adding items to your basket, and completing a checkout cannot be provided. These cookies do not require your consent under Kenyan data protection law.
Cookie Name | Provider | Purpose | Duration |
PHPSESSID | TranschemOnline | Maintains your session state while logged in | Session |
csrf_token | TranschemOnline | Protects against cross-site request forgery (CSRF) attacks | Session |
auth_token | TranschemOnline | Securely authenticates your logged-in session | 7 days |
cart_id | TranschemOnline | Remembers your shopping basket between pages | 30 days |
cookie_consent | TranschemOnline | Stores your cookie consent preferences | 12 months |
load_balancer | TranschemOnline | Routes your requests to the correct server for performance | Session |
4.2 Analytics & Performance Cookies
These cookies collect anonymised information about how visitors use the Platform — for example, which pages are visited most often and whether any error messages are received. This helps us improve how the website works. All data collected is aggregated and does not identify individual users. These cookies are placed only with your consent.
Cookie Name | Provider | Purpose | Duration |
_ga | Google Analytics | Distinguishes unique users for website traffic analysis | 2 years |
_ga_XXXXXX | Google Analytics | Maintains session state for Google Analytics 4 | 2 years |
_gid | Google Analytics | Distinguishes users — stores and updates a unique value for each page visited | 24 hours |
_gat | Google Analytics | Throttles request rate to Google Analytics | 1 minute |
hotjar_id | Hotjar (optional) | Anonymised heatmaps and session recordings for UX improvement | 1 year |
Google Analytics & Data Transfer Google Analytics is operated by Google LLC (USA). Data collected through Google Analytics cookies may be transferred to and processed in the United States. We have configured Google Analytics to anonymise IP addresses and have executed a Data Processing Agreement with Google incorporating Standard Contractual Clauses as required under Section 49 of the Data Protection Act, 2019 for cross-border data transfers. You may opt out of Google Analytics tracking at any time at: tools.google.com/dlpage/gaoptout |
4.3 Functional Cookies
Functional cookies allow the Platform to remember choices you make and provide enhanced, personalised features. For example, they may remember your language preference, your region for delivery, or that you have previously acknowledged a notification. These cookies may be set by us or by third-party providers.
Cookie Name | Provider | Purpose | Duration |
lang_pref | TranschemOnline | Remembers your selected language preference | 12 months |
region_pref | TranschemOnline | Remembers your delivery region to pre-fill address fields | 12 months |
dismiss_banner | TranschemOnline | Records that you have dismissed a site notification or banner | 30 days |
recent_products | TranschemOnline | Stores recently viewed products for your convenience | 7 days |
4.4 Marketing & Advertising Cookies
Consent Required for Marketing Cookies We only place marketing cookies after obtaining your explicit, freely given consent. You may withdraw consent at any time via our Cookie Preference Centre. We do not use marketing cookies to profile or make automated decisions about your health. |
These cookies track your browsing activity across websites to deliver advertisements that may be relevant to your interests. They are provided by third-party advertising partners.
Cookie Name | Provider | Purpose | Duration |
_fbp | Meta (Facebook) | Tracks visits across websites to serve targeted Facebook / Instagram ads | 3 months |
_fbc | Meta (Facebook) | Stores a click identifier when arriving from a Facebook ad | 3 months |
IDE | Google (DoubleClick) | Used for retargeting and measuring ad campaign effectiveness | 13 months |
NID | Registers a unique ID to remember preferences and personalise ads | 6 months |
TranschemOnline does not use your prescription history, health data, or any sensitive personal data to target advertising. Marketing cookies collect only general browsing behaviour and are never linked to your pharmaceutical records.
4.5 Third-Party Embedded Content
Our Platform may include embedded content from third-party services such as YouTube videos, social media share buttons, or payment gateway widgets. These third parties may set their own cookies on your device. We do not control these cookies and recommend that you review the privacy and cookie policies of those third parties directly.
Third Party | Type | Purpose | Their Policy |
Pesapal / M-Pesa Gateway | Functional / Security | Secure payment session management | See provider's website |
YouTube (Google LLC) | Functional / Marketing | Video playback and view tracking | policies.google.com |
Meta (Facebook) | Marketing | Social sharing and ad retargeting | facebook.com/policies |
WhatsApp (Meta) | Functional | Click-to-chat customer service widget | whatsapp.com/legal |
5. Cookies in Our Mobile Application
Our mobile application uses equivalent tracking technologies including SDKs (Software Development Kits) rather than browser cookies. These serve the same purposes as cookies described above:
• Firebase Analytics SDK (Google) — anonymised app usage analytics and crash reporting.
• Firebase Crashlytics — crash reporting to help us identify and fix technical errors.
• App session tokens — maintained in secure device storage to keep you logged in.
• Push notification tokens — used to send you medication reminders and order updates (only if you grant notification permissions).
You can manage mobile tracking permissions through your device settings (iOS: Settings > Privacy; Android: Settings > Apps > Permissions).
6. Cookie Retention Periods
Cookies are retained for no longer than necessary for their stated purpose, as required by Principle 6 (storage limitation) of the Data Protection Act, 2019:
• Session cookies are deleted automatically when you close your browser.
• Persistent cookies remain on your device until they expire or until you delete them manually.
• The specific retention period for each cookie is set out in the tables in Section 4 above.
• We review our cookie list annually and remove any cookies that are no longer necessary.
7. Cross-Border Data Transfers
Some cookies set by third-party providers (e.g., Google Analytics, Meta) involve the transfer of data outside Kenya. In accordance with Section 49 of the Data Protection Act, 2019, TranschemOnline ensures that all such transfers are:
• Subject to Data Processing Agreements incorporating Standard Contractual Clauses or equivalent transfer safeguards.
• Limited to countries or organisations that provide an adequate level of data protection equivalent to Kenyan standards.
• Disclosed transparently in this Policy so that you can make an informed consent decision.
Where you have not consented to analytics or marketing cookies, no cross-border data transfers via these cookies will occur.
8. Managing Your Cookie Preferences
8.1 Cookie Consent Banner
When you first visit transchemonline.co.ke, you will be presented with a Cookie Consent Banner that allows you to:
• Accept All Cookies — consent to all categories including analytics and marketing.
• Accept Necessary Only — allow only strictly necessary cookies.
• Customise Preferences — individually select which categories of cookies you accept via the Cookie Preference Centre.
8.2 Cookie Preference Centre
You may change your cookie preferences at any time by accessing the Cookie Preference Centre, available via the "Cookie Settings" link in the footer of every page on our website. Changes take effect immediately.
8.3 Browser Controls
You can also control cookies directly through your web browser settings:
Google Chrome | Settings > Privacy and Security > Cookies and other site data |
Mozilla Firefox | Settings > Privacy & Security > Cookies and Site Data |
Microsoft Edge | Settings > Cookies and Site Permissions > Manage and delete cookies |
Apple Safari | Preferences > Privacy > Manage Website Data |
Opera | Settings > Advanced > Privacy & Security > Site Settings > Cookies |
Please note that blocking or deleting strictly necessary cookies may prevent you from using key features of our Platform, including logging in and completing orders.
8.4 Opting Out of Specific Third-Party Cookies
• Google Analytics: tools.google.com/dlpage/gaoptout
• Google Ads personalisation: adssettings.google.com
• Meta (Facebook) ad preferences: facebook.com/ads/preferences
• General opt-out for online behavioural advertising: youronlinechoices.eu or networkadvertising.org/choices
9. Your Rights Under the Data Protection Act, 2019
To the extent that cookies process personal data, you have the following rights under the Data Protection Act, 2019:
Right to Information | The right to be informed about what cookies we use and why — fulfilled by this Policy. |
Right to Consent / Withdraw | The right to give or withdraw consent for non-essential cookies at any time via our Cookie Preference Centre. |
Right to Access | The right to request access to personal data we hold about you, including data collected via cookies. |
Right to Correction | The right to request correction of inaccurate personal data. |
Right to Deletion | The right to request deletion of your personal data ("right to be forgotten") where processing is based on consent. |
Right to Object | The right to object to processing of your personal data for direct marketing purposes. |
Right to Complain | The right to lodge a complaint with the ODPC at odpc.go.ke if you believe your data rights have been violated. |
To exercise any of the above rights, please contact our Data Protection Officer at transchem@proton.me with the subject line "Data Subject Rights Request". We will respond within 30 days as required under the Act.
10. Children's Privacy
Our Platform is not directed at children under the age of 18. We do not knowingly set cookies that profile or track children. If you believe a child under 18 has provided personal data to us through our Platform, please contact us immediately at transchem@proton.me and we will take prompt action to delete that data in compliance with Section 30(1)(d) of the Data Protection Act, 2019.
11. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or changes in our practices. When we make material changes:
• The updated Policy will be posted on the Platform with a revised Effective Date.
• Where required by law, we will obtain fresh consent from users for any new categories of cookies.
• Registered users will be notified by email of significant changes.
We encourage you to review this Policy periodically. Continued use of the Platform after a revised Policy has been posted constitutes acceptance of the updated Policy, subject to consent requirements for non-essential cookies.
