Healthxchange Pharmacy UK Limited
www.obagiuk.com
Last updated: June 2026
Contents
- What Are Cookies?
- Data Controller
- How We Obtain Your Consent
- How to Change or Withdraw Your Consent
- Cookie Categories We Use
- Full Cookie Declaration
- Third-Party Providers
- How Long Do Cookies Last?
- Disabling Cookies via Your Browser
- Changes to This Cookie Policy
- Contact and Complaints
1. What Are Cookies?
Cookies are small text files placed on your device (computer, tablet or phone) by a website when you visit it. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to the website operator.
This Cookie Policy explains what cookies and similar technologies (such as local storage, session storage, and pixel and behavioural-analytics trackers) are used on www.obagiuk.com, why we use them, and how you can control them. It should be read alongside our Privacy Policy.
2. Data Controller
This Website (www.obagiuk.com) is operated by Healthxchange Pharmacy UK Limited, a company registered in England and Wales (company number 01999872), with its registered office at 1st Floor Sackville House, 143–149 Fenchurch Street, London, EC3M 6BL. Healthxchange Pharmacy UK Limited is the data controller for personal data processed through this Website and is registered with the UK Information Commissioner’s Office (ICO) under registration reference ZB137616. The ICO is our lead supervisory authority.
2.1 Contact and DPO
If you have any questions about this Cookie Policy or our use of cookies, please contact the Data Protection Officer at dpo@healthxchange.com.
3. How We Obtain Your Consent
When you first visit our Website, a consent banner (provided by Cookiebot by Usercentrics) will appear. This gives you a clear choice:
- Allow — consent to all cookie categories
- Deny — decline all non-essential cookies (only strictly necessary cookies will be set)
- Details tab — choose which categories you consent to individually (Preferences, Statistics, Marketing)
Non-essential cookies will not be placed on your device until you have given your consent. If you click Deny, only cookies that are strictly necessary for the Website to function will be used. You are not required to accept non-essential cookies in order to use this Website.
All non-essential cookie categories default to off and require your active opt-in before they are enabled. Our Website uses Google Consent Mode v2, which means that analytics and advertising signals (analytics_storage, ad_storage, ad_user_data and ad_personalization) are only passed to Google and other third-party platforms after you have given your consent.
4. How to Change or Withdraw Your Consent
You can change or withdraw your cookie consent at any time. Consent must be as easy to withdraw as it was to give.
To change your preferences:
- Click the Cookiebot privacy trigger icon (the small floating icon at the bottom of the screen), or
- Click the “Manage Cookies” link in the website footer
Either option will reopen the consent dialog, allowing you to change your selections or withdraw consent entirely. When you withdraw consent for a cookie category, those cookies will be deleted from your device.
You can also control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, the consent tool described above is the easiest and most reliable way to manage your preferences on this Website.
5. Cookie Categories We Use
5.1 Strictly Necessary Cookies
These cookies are essential for the Website to function. They enable core features including page navigation, shopping basket functionality, checkout, payment processing, video playback and protection of forms from abuse. The Website cannot operate properly without them, and they cannot be declined.
Examples include: the Cookiebot consent cookie (which records your consent choice); and the session, basket, checkout, security and content-delivery cookies set by our e-commerce platform and its payment and security providers. The full list, with names and expiry, is shown in the Cookiebot declaration in Section 6.
5.2 Preference / Functional Cookies
These cookies remember choices you have made – such as your preferred language or region – to provide a more personalised and consistent experience. The Website will still work without them, but you may need to re-enter preferences on each visit.
We do not currently set any dedicated preference or functional cookies on this Website. If we introduce them in future (for example, to remember a display or region preference), they will be listed in the Cookiebot declaration in Section 6 and, where they are not strictly necessary, will be set only after you have consented to the Preferences category.
5.3 Statistics Cookies
These cookies collect information about how visitors use the Website – which pages are visited, how long sessions last, where errors occur, and how users interact with page elements – so that we can report on and improve the Website’s performance. The data collected is aggregated or anonymised where possible.
Our statistics tools include:
- Google Analytics 4 – primary property (measurement ID G-3FQDEXQ1QC), loaded through Google Tag Manager. Sets the
_gacookie (unique-user identifier) and the_ga_3FQDEXQ1QCsession-state cookie. - Google Analytics 4 – secondary property (measurement ID G-R0EVW6Z0VW). Sets the
_ga_R0EVW6Z0VWsession-state cookie. - Google Universal Analytics (property UA-17668591-2) – a legacy Google Analytics tag (analytics.js) that remains present on the Website. It sets the
_gidcookie (distinguishes users, expires after 24 hours) and the_gat_UA-17668591-2cookie (used to throttle the request rate, expires after 1 minute).
These tools are only activated after you have consented to the Statistics category.
5.4 Marketing Cookies
These cookies are used to track visitors across websites, measure advertising and email campaign performance, and build a profile of your interests so that relevant content and advertisements can be shown to you. They are set by third-party advertising, retargeting and email-CRM networks and are only set after you have consented to the Marketing category.
Our marketing cookies and trackers include those operated by:
- Google Ads / DoubleClick (conversion ID AW-16605736718) – conversion tracking and remarketing via the Google Conversion Linker (sets the
_gcl_aucookie). Associated Google services that may be contacted include Google Ads conversion tracking, Google Remarketing, DoubleClick audience measurement and Google remarketing audiences (ga-audiences).
You can decline all marketing cookies by clicking “Deny” on the consent banner or by deselecting the Marketing category in the cookie settings.
5.5 Unclassified Cookies
The Cookiebot declaration may list a small number of items as unclassified while they are being reviewed and categorised (for example, certain temporary session items). We aim to keep this number to a minimum and to resolve pending items promptly. Until an item is properly categorised it is treated as non-essential and will not be placed on your device without consent.
6. Full Cookie Declaration
A detailed, auto-updated list of every cookie and storage item in use on this Website – including its name, provider, purpose, and expiry – is maintained by Cookiebot and is embedded at the bottom of this page. This declaration is updated automatically each time Cookiebot scans the Website, so it always reflects the cookies currently in use. The most recent scan date is shown at the top of the declaration.
7. Third-Party Providers
The following third-party providers set cookies or similar technologies on this Website. Each operates under its own privacy policy:
| Provider | Purpose | Further Information |
|---|---|---|
| Cookiebot / Usercentrics | Cookie consent management | cookiebot.com/en/privacy-policy |
| Google Tag Manager | Tag management container | policies.google.com/privacy |
| Google Analytics | Website analytics (GA4 and legacy Universal Analytics) | policies.google.com/privacy |
| Google Ads | Ad conversion tracking and remarketing | policies.google.com/privacy |
8. How Long Do Cookies Last?
Cookies have different lifespans:
- Session cookies are deleted automatically when you close your browser.
- Persistent cookies remain on your device for a set period (from one day to two years, depending on the cookie) or until you delete them.
- Local storage and session storage items persist until cleared by the Website or by you through your browser settings.
The specific expiry for each item is shown in the Cookiebot cookie declaration embedded in Section 6.
9. Disabling Cookies via Your Browser
Most browsers allow you to refuse to accept cookies and to delete cookies already stored. The methods vary by browser; you can find up-to-date guidance via your browser’s Help function or at www.allaboutcookies.org.
Please note that blocking strictly necessary cookies will affect the functionality of this Website, including basket, checkout and payment features. You can manage non-essential cookie preferences specifically for this Website using the Cookiebot privacy trigger icon at the bottom of the screen.
10. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for legal, regulatory, or operational reasons. The “Last updated” date at the top of this page shows when the policy was most recently revised.
11. Contact and Complaints
If you have any questions about this Cookie Policy, please contact:
Data Protection Officer
Healthxchange Pharmacy UK Limited
1st Floor Sackville House, 143–149 Fenchurch Street, London, EC3M 6BL
Email: dpo@healthxchange.com
If you are unhappy with how we handle cookies or your personal data, you have the right to complain to the relevant supervisory authority:
Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — www.ico.org.uk