Cookie Policy

1. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet or phone) by a website when you visit it. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to the website operator.

This Cookie Policy explains what cookies and similar technologies (such as local storage, session storage, and pixel and behavioural-analytics trackers) are used on www.obagiuk.com, why we use them, and how you can control them. It should be read alongside our Privacy Policy.

2. Data Controller

This Website (www.obagiuk.com) is operated by Healthxchange Pharmacy UK Limited, a company registered in England and Wales (company number 01999872), with its registered office at 1st Floor Sackville House, 143–149 Fenchurch Street, London, EC3M 6BL. Healthxchange Pharmacy UK Limited is the data controller for personal data processed through this Website and is registered with the UK Information Commissioner’s Office (ICO) under registration reference ZB137616. The ICO is our lead supervisory authority.

2.1 Contact and DPO

If you have any questions about this Cookie Policy or our use of cookies, please contact the Data Protection Officer at dpo@healthxchange.com.

3. How We Obtain Your Consent

When you first visit our Website, a consent banner (provided by Cookiebot by Usercentrics) will appear. This gives you a clear choice:

• Allow — consent to all cookie categories
• Deny — decline all non-essential cookies (only strictly necessary cookies will be set)
• Details tab — choose which categories you consent to individually (Preferences, Statistics, Marketing)

Non-essential cookies will not be placed on your device until you have given your consent. If you click Deny, only cookies that are strictly necessary for the Website to function will be used. You are not required to accept non-essential cookies in order to use this Website.

All non-essential cookie categories default to off and require your active opt-in before they are enabled. Our Website uses Google Consent Mode v2, which means that analytics and advertising signals (analytics_storage, ad_storage, ad_user_data and ad_personalization) are only passed to Google and other third-party platforms after you have given your consent.

4. How to Change or Withdraw Your Consent

You can change or withdraw your cookie consent at any time. Consent must be as easy to withdraw as it was to give.

To change your preferences:

• Click the Cookiebot privacy trigger icon (the small floating icon at the bottom of the screen), or
• Click the “Manage Cookies” link in the website footer

Either option will reopen the consent dialog, allowing you to change your selections or withdraw consent entirely. When you withdraw consent for a cookie category, those cookies will be deleted from your device.

You can also control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, the consent tool described above is the easiest and most reliable way to manage your preferences on this Website.

5. Cookie Categories We Use

5.1 Strictly Necessary Cookies

These cookies are essential for the Website to function. They enable core features including page navigation, shopping basket functionality, checkout, payment processing, video playback and protection of forms from abuse. The Website cannot operate properly without them, and they cannot be declined.

Examples include: the Cookiebot consent cookie (which records your consent choice); and the session, basket, checkout, security and content-delivery cookies set by our e-commerce platform and its payment and security providers. The full list, with names and expiry, is shown in the Cookiebot declaration in Section 6.

5.2 Preference / Functional Cookies

These cookies remember choices you have made — such as your preferred language or region — to provide a more personalised and consistent experience. The Website will still work without them, but you may need to re-enter preferences on each visit.

We do not currently set any dedicated preference or functional cookies on this Website. If we introduce them in future (for example, to remember a display or region preference), they will be listed in the Cookiebot declaration in Section 6 and, where they are not strictly necessary, will be set only after you have consented to the Preferences category.

5.3 Statistics Cookies

These cookies collect information about how visitors use the Website — which pages are visited, how long sessions last, where errors occur, and how users interact with page elements — so that we can report on and improve the Website’s performance. The data collected is aggregated or anonymised where possible.

Our statistics tools include:

• Google Analytics 4 (measurement ID G-3FQDEXQ1QC), loaded through Google Tag Manager. It sets the _ga cookie — a unique, anonymous client ID used to distinguish visitors and shared across Google Analytics on the domain (expires after 2 years) — and the _ga_3FQDEXQ1QC cookie, which stores session and engagement state for this GA4 property (expires after 2 years).

These tools are only activated after you have consented to the Statistics category.

5.4 Marketing Cookies

These cookies are used to track visitors across websites, measure advertising performance, and build a profile of your interests so that relevant content and advertisements can be shown to you. They are set by third-party advertising and retargeting networks and are only set after you have consented to the Marketing category.

Our marketing cookies and trackers include those operated by:

• Google Ads / DoubleClick (conversion ID AW-16605736718) — conversion tracking and remarketing via the Google Conversion Linker. Sets the _gcl_au cookie (expires after 90 days), which stores an advertising click ID used to attribute conversions to Google Ads campaigns and for audience targeting. Associated Google services that may be contacted include Google Ads conversion tracking, Google Remarketing and DoubleClick audience measurement.
• Meta (Facebook) Pixel — sets the _fbp cookie (expires after 90 days), used by Meta to identify your browser, measure conversions, retarget visitors with advertising, and build audience segments across Facebook and Instagram.

You can decline all marketing cookies by clicking “Deny” on the consent banner or by deselecting the Marketing category in the cookie settings.

5.5 Unclassified Cookies

The Cookiebot declaration may list a small number of items as unclassified while they are being reviewed and categorised (for example, certain temporary session items). We aim to keep this number to a minimum and to resolve pending items promptly. Until an item is properly categorised it is treated as non-essential and will not be placed on your device without consent.

6. Full Cookie Declaration

A detailed, auto-updated list of every cookie and storage item in use on this Website — including its name, provider, purpose, and expiry — is maintained by Cookiebot and is embedded at the bottom of this page. This declaration is updated automatically each time Cookiebot scans the Website, so it always reflects the cookies currently in use. The most recent scan date is shown at the top of the declaration.

7. Third-Party Providers

The following third-party providers set cookies or similar technologies on this Website. Each operates under its own privacy policy:

Lucky Orange, Curator.io and the Google Ads conversion tag load on Our Website but do not set cookies or other identifiers in your browser; they process data server-side or in temporary session memory. Where such a service falls within a non-essential category, it is still governed by your consent choice and is only activated after you have given consent.

8. How Long Do Cookies Last?

Cookies have different lifespans:

• Session cookies are deleted automatically when you close your browser.
• Persistent cookies remain on your device for a set period (from one day to two years, depending on the cookie) or until you delete them.
• Local storage and session storage items persist until cleared by the Website or by you through your browser settings.

The specific expiry for each item is shown in the Cookiebot cookie declaration embedded in Section 6.

9. Disabling Cookies via Your Browser

Most browsers allow you to refuse to accept cookies and to delete cookies already stored. The methods vary by browser; you can find up-to-date guidance via your browser’s Help function or at www.allaboutcookies.org.

Please note that blocking strictly necessary cookies will affect the functionality of this Website, including basket, checkout and payment features. You can manage non-essential cookie preferences specifically for this Website using the Cookiebot privacy trigger icon at the bottom of the screen.

10. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for legal, regulatory, or operational reasons. The “Last updated” date at the top of this page shows when the policy was most recently revised.

11. Contact and Complaints

If you have any questions about this Cookie Policy, please contact:

Data Protection Officer
Healthxchange Pharmacy UK Limited
1st Floor Sackville House, 143–149 Fenchurch Street, London, EC3M 6BL
Email: dpo@healthxchange.com

If you are unhappy with how we handle cookies or your personal data, you have the right to complain to the relevant supervisory authority:

Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — www.ico.org.uk