Cookie Policy
Updated: 3 September 2026 · Version 2026-09-03
1. What cookies are
Cookies are small text files that a website stores in a visitor's browser. Alongside cookies, we use the browser's local storage (localStorage) — it works in a similar way, but its data is not sent to the server automatically.
This Policy describes which of these technologies are used on ibolid.kz and mag.ibolid.kz (hereinafter — the Portal) and why. The operator is 2Medlink Group LLP, BIN 260740001075.
2. Which cookies we use
The cookies listed below are strictly necessary: without them, signing in to the personal account and protecting forms are impossible, so they are always set and do not require consent. Separately, and only with your consent, the Portal uses analytics cookies — see Section 4. There are no advertising cookies or retargeting networks on the Portal.
| File | Purpose | Term |
|---|---|---|
access_token | Access token for the personal account. Set after confirmation of the one-time code, inaccessible to browser-side scripts (httpOnly), transmitted only over HTTPS | 1 hour |
refresh_token | Extending the session without re-entering the code, httpOnly | 30 days |
csrftoken | Protecting forms against cross-site request forgery | 1 year |
sessionid | Session in the admin panel, for Company employees only | until the session is closed |
3. Browser local storage
| Key | What it stores | Why |
|---|---|---|
auth-store | An indicator that the user is signed in and their display data | So that the interface does not "flicker" before the server responds |
city-store | The selected city and an indicator that the choice is confirmed | So as not to ask for the city on every visit |
Local storage data remains in the browser and is deleted together with clearing the site data.
4. Analytics
The Portal uses Google Analytics 4 (operator — Google LLC) to collect anonymised statistics: which pages are opened, from which devices and regions, and how search and appointment booking are used. The data is used only in aggregated form and to improve the Portal; it is not used to identify a specific individual.
Google Analytics does not start until consent is given. On the first visit the Portal shows a cookie notice; the analytics scripts and Google cookies (_ga, _ga_*) are loaded only after the "Accept" button is pressed. Before that, and if consent is declined, no third-party script is loaded on the Portal.
Consent can be withdrawn at any time: via the "Necessary only" button in the same notice, or in the personal account under "Analytics cookies". Declining or withdrawing consent does not restrict access to any Portal feature.
Google may process the data obtained on servers outside the Republic of Kazakhstan; processing on Google's side is governed by the rules of Google LLC. See also the Privacy Policy regarding cross-border data transfers.
The Portal does not use advertising pixels or retargeting networks. If the set of analytics or other third-party technologies changes, this Policy will be updated and consent will be requested again before they begin operating.
5. Geolocation
On the first visit, the Portal may ask the browser for access to the location in order to suggest the nearest city from the directory. The request is shown only once and requires explicit permission. The coordinates obtained are used in the browser and are not sent to the server; the selected city is stored in local storage.
6. Third-party cookies
With your consent, the Portal loads Google Analytics cookies (Section 4) — the processing of these cookies on Google's side is governed by the rules of Google LLC. When signing in via a Google account, the processing of cookies on Google's side is likewise governed by the rules of Google LLC. The Portal sets no other tracking cookies. Following external links from the Portal means that the third-party site's own rules apply.
7. How to opt out of cookies
You can opt out of analytics cookies in the cookie notice or in your personal account (the "Analytics cookies" section) — this does not affect how the Portal works. Strictly necessary cookies can be blocked in your browser settings, but then signing in to the personal account, booking appointments and ordering medicines will become impossible; viewing the open sections of the Portal will remain available.
8. Changes
We have the right to amend this Policy. The current version is always available at https://ibolid.kz/en/legal/cookies. Questions — to info@ibolid.kz.