Clever Aesthetic Tech Limited (trading as Pure Obagi)
www.pureobagi.com
COOKIE POLICY
Last updated: June 2026
Contents
1. What Are Cookies?
2. Data Controller
3. How We Obtain Your Consent
4. How to Change or Withdraw Your Consent
5. Cookie Categories We Use
6. Full Cookie Declaration
7. Third-Party Providers
8. How Long Do Cookies Last?
9. Disabling Cookies via Your Browser
10. Changes to This Cookie Policy
11. Contact and Complaints
1. What Are Cookies?
Cookies are small text files placed on your device (computer, tablet or phone) by a website when you visit it. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to the website operator.
This Cookie Policy explains what cookies and similar technologies (such as local storage, session storage, and pixel and behavioural-analytics trackers) are used on www.pureobagi.com, why we use them, and how you can control them. It should be read alongside our Privacy Policy.
2. Data Controller
This Website is operated by Clever Aesthetic Tech Limited, trading as “Pure Obagi”, a company incorporated in Ireland (company number 676949) with its registered office at Block C, Unit 16, The Exchange, Calmount Business Park, Ballymount, Dublin 12, D12 RF43, Ireland. Our lead supervisory authority is the Irish Data Protection Commission (DPC).
2.1 UK Representative
Because We are established in Ireland (an EU Member State) and process personal data of individuals in the United Kingdom, We are required under Article 27 of the UK GDPR to designate a UK representative. Our designated UK representative is:
Healthxchange Pharmacy UK Limited
1st Floor Sackville House, 143–149 Fenchurch Street, London, EC3M 6BL
Email: dpo@healthxchange.com
UK data subjects may contact Our UK representative in respect of any matter relating to Our processing of their personal data.
2.2 Contact and DPO
If you have any questions about this Cookie Policy or our use of cookies, please contact the Data Protection Officer at dpo@healthxchange.com.
3. How We Obtain Your Consent
When you first visit our Website, a consent banner (provided by Cookiebot by Usercentrics) will appear. This gives you a clear choice:
- Allow — consent to all cookie categories
- Deny — decline all non-essential cookies (only strictly necessary cookies will be set)
- Details tab — choose which categories you consent to individually (Preferences, Statistics, Marketing)
Non-essential cookies will not be placed on your device until you have given your consent. If you click Deny, only cookies that are strictly necessary for the Website to function will be used. You are not required to accept non-essential cookies in order to use this Website.
All non-essential cookie categories default to off and require your active opt-in before they are enabled. Our Website uses Google Consent Mode v2, which means that analytics and advertising signals (analytics_storage, ad_storage, ad_user_data and ad_personalization) are only passed to Google and other third-party platforms after you have given your consent.
4. How to Change or Withdraw Your Consent
You can change or withdraw your cookie consent at any time. Consent must be as easy to withdraw as it was to give.
To change your preferences:
- Click the Cookiebot privacy trigger icon (the small floating icon at the bottom of the screen), or
- Click the “Manage Cookies” link in the website footer
Either option will reopen the consent dialog, allowing you to change your selections or withdraw consent entirely. When you withdraw consent for a cookie category, those cookies will be deleted from your device.
You can also control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, the consent tool described above is the easiest and most reliable way to manage your preferences on this Website.
5. Cookie Categories We Use
5.1 Strictly Necessary Cookies
These cookies are essential for the Website to function. They enable core features including page navigation, shopping basket functionality, checkout, payment processing, video playback and protection of forms from abuse. The Website cannot operate properly without them, and they cannot be declined.
Examples include: WordPress and WooCommerce session, basket, checkout and timeout cookies (including data-timeout); the Cookiebot consent cookie (which records your consent choice); PayPal session cookies (used to enable payment via PayPal); Cloudflare security cookies; Vimeo cookies (used to play embedded video content); and gstatic cookies (Google content delivery).
5.2 Preference / Functional Cookies
These cookies remember choices you have made — such as your preferred language or region — to provide a more personalised and consistent experience. The Website will still work without them, but you may need to re-enter preferences on each visit.
Examples include: WPML language cookies (used to remember which language version of the site you are viewing — e.g. _icl_visitor_lang_js, wp-wpml_current_language, wpml_browser_redirect_test) and the Klaviyo on-site preference key (klaviyoOnsite).
5.3 Statistics Cookies
These cookies collect information about how visitors use the Website — which pages are visited, how long sessions last, where errors occur, and how users interact with page elements — so that we can report on and improve the Website’s performance. The data collected is aggregated or anonymised where possible.
Our statistics tools include:
- Google Analytics 4 (measurement ID G-0WWBJEPVC6), loaded through Google Tag Manager (container GTM-M2QFHHS). Sets the _ga and _ga_0WWBJEPVC6 cookies.
- Klaviyo — sets the __kla_id cookie to recognise return visitors and measure email and CRM engagement.
- RevenueHunt (Ahoy tracking) — product quiz analytics, used to understand how visitors interact with our recommendation tools.
- ContentSquare — behavioural analytics, heatmaps and interaction tracking, used to identify usability issues and improve the Website. No password fields or payment details are captured.
These tools are only activated after you have consented to the Statistics category.
5.4 Marketing Cookies
These cookies are used to track visitors across websites, measure advertising and email campaign performance, and build a profile of your interests so that relevant content and advertisements can be shown to you. They are set by third-party advertising, retargeting and email-CRM networks and are only set after you have consented to the Marketing category.
Our marketing cookies and trackers include those operated by:
- Google Ads (conversion ID AW-455606943) — conversion tracking and remarketing via the Google Conversion Linker (sets the _gcl_au cookie and the _gcl_ls local storage item)
- Klaviyo — email and SMS marketing CRM; used to attribute conversions and personalise marketing communications
- ActiveCampaign (Prism) — visitor identification and behavioural tracking to support CRM and email marketing automation (sets the prism_* cookie)
You can decline all marketing cookies by clicking “Deny” on the consent banner or by deselecting the Marketing category in the cookie settings.
5.5 Unclassified Cookies
The Cookiebot declaration may list a small number of items as unclassified while they are being reviewed and categorised (for example, certain RevenueHunt event tokens or temporary session items). We aim to keep this number to a minimum and to resolve pending items promptly. Until an item is properly categorised it is treated as non-essential and will not be placed on your device without consent.
6. Full Cookie Declaration
A detailed, auto-updated list of every cookie and storage item in use on this Website — including its name, provider, purpose, and expiry — is maintained by Cookiebot and is embedded at the bottom of this page. This declaration is updated automatically each time Cookiebot scans the Website, so it always reflects the cookies currently in use. The most recent scan date is shown at the top of the declaration.
7. Third-Party Providers
The following third-party providers set cookies or similar technologies on this Website. Each operates under its own privacy policy:
| Provider | Purpose | Further Information |
| WordPress / WooCommerce / Automattic | E-commerce platform, basket, checkout and payments | automattic.com/privacy |
| WPML | Multilingual site functionality | wpml.org/documentation/privacy-policy-and-gdpr-compliance |
| Cookiebot / Usercentrics | Cookie consent management | cookiebot.com/en/privacy-policy |
| Cloudflare | Bot management, security and content delivery | cloudflare.com/privacypolicy |
| Google Tag Manager | Tag management container | policies.google.com/privacy |
| Google Analytics | Website analytics (GA4) | policies.google.com/privacy |
| Google Ads | Ad conversion tracking and remarketing | policies.google.com/privacy |
| PayPal | Payment processing | paypal.com/uk/legalhub/privacy-full |
| Vimeo | Embedded video playback | vimeo.com/privacy |
| Klaviyo | Email and SMS marketing CRM, on-site personalisation | klaviyo.com/legal/privacy |
| ActiveCampaign | Marketing automation, CRM and visitor identification (Prism) | activecampaign.com/legal/privacy-policy |
| ContentSquare | Behavioural analytics, heatmaps and session interaction tracking | contentsquare.com/privacy-policy |
| RevenueHunt | Product quiz and recommendation analytics | revenuehunt.com/privacy-policy |
8. How Long Do Cookies Last?
Cookies have different lifespans:
- Session cookies are deleted automatically when you close your browser.
- Persistent cookies remain on your device for a set period (from one day to two years, depending on the cookie) or until you delete them.
- Local storage and session storage items persist until cleared by the Website or by you through your browser settings.
The specific expiry for each item is shown in the Cookiebot cookie declaration embedded in Section 6.
9. Disabling Cookies via Your Browser
Most browsers allow you to refuse to accept cookies and to delete cookies already stored. The methods vary by browser; you can find up-to-date guidance via your browser’s Help function or at www.allaboutcookies.org.
Please note that blocking strictly necessary cookies will affect the functionality of this Website, including basket, checkout and payment features. You can manage non-essential cookie preferences specifically for this Website using the Cookiebot privacy trigger icon at the bottom of the screen.
10. Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for legal, regulatory, or operational reasons. The “Last updated” date at the top of this page shows when the policy was most recently revised.
11. Contact and Complaints
If you have any questions about this Cookie Policy, please contact:
Data Protection Officer
Clever Aesthetic Tech Limited
Block C, Unit 16, The Exchange, Calmount Business Park, Ballymount, Dublin 12, D12 RF43, Ireland
Email: dpo@healthxchange.com
If you are unhappy with how we handle cookies or your personal data, you have the right to complain to the relevant supervisory authority:
- Ireland (our lead supervisory authority): Data Protection Commission (DPC), 6 Pembroke Row, Dublin 2, D02 X963, Ireland — www.dataprotection.ie
- United Kingdom: Information Commissioner’s Office (ICO) — www.ico.org.uk