{"id":4238,"date":"2020-10-19T17:33:09","date_gmt":"2020-10-19T16:33:09","guid":{"rendered":"http:\/\/obagi.com.gridhosted.co.uk\/?page_id=4238"},"modified":"2026-06-15T12:23:54","modified_gmt":"2026-06-15T11:23:54","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/pureobagi.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><em>Clever Aesthetic Tech Limited (trading as Pure Obagi)<\/em><br>www.pureobagi.com<br>Last reviewed: June 2026<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Contents<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>About Us and This Policy<\/li>\n\n\n\n<li>About Us and This Policy<\/li>\n\n\n\n<li>The Legal Framework<\/li>\n\n\n\n<li>What Information Do We Collect?<\/li>\n\n\n\n<li>Cookies and Tracking Technologies<\/li>\n\n\n\n<li>How Do We Use Your Information?<\/li>\n\n\n\n<li>Lawful Basis for Processing<\/li>\n\n\n\n<li>How Do We Handle Your Information?<\/li>\n\n\n\n<li>International Data Transfers<\/li>\n\n\n\n<li>Data Retention<\/li>\n\n\n\n<li>To Whom May We Disclose Your Information?<\/li>\n\n\n\n<li>Your Rights<\/li>\n\n\n\n<li>Changes to This Policy<\/li>\n\n\n\n<li>Your Right to Complain<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. About Us and This Policy<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Clever Aesthetic Tech Limited, trading as \u201cPure Obagi\u201d (\u201cWe\u201d, \u201cUs\u201d, \u201cOur\u201d), is committed to protecting your personal data. This Privacy Policy explains how We collect, use, store and share your personal data when you use Our website at www.pureobagi.com (the \u201cWebsite\u201d).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Please read this Policy carefully. By using Our Website, you acknowledge that you have read and understood how We process your personal data as described here. If you do not agree, please do not use Our Website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1.1 Who We Are<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pure Obagi is a brand of Clever Aesthetic Tech Limited, a company incorporated in Ireland (company number 676949), with its registered office at Unit 16 The Exchange, Calmount Business Park, Ballymount, Dublin, D12 RF43, Ireland.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We are registered with the Office of the Data Protection Authority (ODPA) in Guernsey under registration number DPA2706. As a controller established in Ireland, We are subject to the EU GDPR, and Our lead supervisory authority in the EU is the Irish Data Protection Commission (DPC).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1.2 UK Representative<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because We are established in Ireland (an EU Member State) and process personal data of individuals in the United Kingdom, We are required under Article 27 of the UK GDPR to designate a UK representative. Our designated UK representative is:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Healthxchange Pharmacy UK Limited<\/strong> 1st Floor Sackville House, 143\u2013149 Fenchurch Street, London, EC3M 6BL Email: dpo@healthxchange.com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">UK data subjects may contact Our UK representative in respect of any matter relating to Our processing of their personal data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1.3 Contact and DPO<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Any questions, comments or requests regarding this Privacy Policy should be addressed to Our Data Protection Officer:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Data Protection Officer Clever Aesthetic Tech Limited Unit 16 The Exchange, Calmount Business Park, Ballymount, Dublin, D12 RF43 Email: dpo@healthxchange.com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. The Legal Framework<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We process your personal data in accordance with:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The EU General Data Protection Regulation 2016\/679 (\u201cGDPR\u201d), as it applies to Our processing of data concerning EU residents;<\/li>\n\n\n\n<li>The UK General Data Protection Regulation (\u201cUK GDPR\u201d) and the UK Data Protection Act 2018, as applicable to Our processing of data concerning UK residents; and<\/li>\n\n\n\n<li>Any other applicable data protection laws.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This Policy sets out:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the categories of personal data We collect;<\/li>\n\n\n\n<li>the purposes for which We process it;<\/li>\n\n\n\n<li>the lawful basis on which We rely;<\/li>\n\n\n\n<li>how long We retain it; and<\/li>\n\n\n\n<li>your rights in relation to your personal data.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">For the purposes of this Policy, We act as the Data Controller in respect of the personal data of Our customers and website users.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. What Information Do We Collect?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.1 Information You Give Us<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you register an account, place an order, or correspond with Us, We may collect:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Name and date of birth<\/li>\n\n\n\n<li>Contact information: postal address, email address, telephone number<\/li>\n\n\n\n<li>Order information: products ordered, delivery address, payment details<\/li>\n\n\n\n<li>Any other information you voluntarily provide when contacting Us<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.2 Information We Collect Automatically<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When you visit Our Website, We may automatically collect:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Technical data: IP address, browser type and version, operating system, device type, time zone setting, browser plug-in types and versions<\/li>\n\n\n\n<li>Usage data: pages visited, clickstream data (URLs, time and date of visit), products viewed or searched, page response times, download errors, length of visits, page interaction data (scrolling, clicks, mouse-overs), and how you navigate away from the page<\/li>\n\n\n\n<li>Marketing and analytics data: traffic source, referral data, session data<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This data is collected via cookies and similar tracking technologies. Please see Section 4 for full details.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.3 Information from Third Parties<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We may receive information about you from third-party analytics and marketing platforms (such as Google Analytics, Meta\/Facebook, Klaviyo and ActiveCampaign) where you have interacted with Our advertising or marketing content. This data is used only where you have given your consent via Our cookie consent tool.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4. Cookies and Tracking Technologies<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.1 How We Use Cookies<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our Website uses cookies and similar tracking technologies to distinguish you from other users, to remember your preferences, and to help Us improve the Website and deliver relevant advertising. Cookies are small text files placed on your device when you visit a website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We use the following categories of cookies:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Category<\/strong><\/td><td><strong>Purpose<\/strong><\/td><td><strong>Examples<\/strong><\/td><\/tr><tr><td>Strictly Necessary<\/td><td>Essential for the Website to function. Cannot be disabled.<\/td><td>Session cookies, language preference (WPML), security tokens<\/td><\/tr><tr><td>Analytics \/ Statistics<\/td><td>Help Us understand how visitors use the Website. Only set with your consent.<\/td><td>Google Analytics (<em>ga), Sourcebuster (sbjs<\/em>*)<\/td><\/tr><tr><td>Marketing \/ Targeting<\/td><td>Used to deliver relevant advertising and to track conversions. Only set with your consent.<\/td><td>Facebook Pixel (_fbp), Google Ads (_gcl_au), Klaviyo (__kla_id), ActiveCampaign (prism_*)<\/td><\/tr><tr><td>Unclassified<\/td><td>Cookies whose purpose We are still investigating.<\/td><td>data-timeout<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.2 Your Cookie Choices \u2014 Cookiebot<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We use Cookiebot as Our Consent Management Platform (CMP). When you first visit Our Website, Cookiebot will present you with a banner that allows you to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Accept all cookies<\/li>\n\n\n\n<li>Reject all non-essential cookies<\/li>\n\n\n\n<li>Manage your preferences by category (Analytics, Marketing, Unclassified)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">No analytics or marketing cookies will be set until you have given your consent. Strictly necessary cookies may be set without consent as they are essential for the Website to operate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can change or withdraw your consent at any time by clicking the \u201cManage Cookies\u201d link in the footer of every page on Our Website. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.3 Cookie Retention Periods<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Full details of all cookies in use on Our Website, including their names, providers, purposes and retention periods, are set out in Our Cookie Policy, available at www.pureobagi.com\/cookie-policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.4 Google Consent Mode<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We have implemented Google Consent Mode v2 via Google Tag Manager. This means that Google Analytics 4 and Google Ads will only operate in full data-collection mode where you have consented to analytics and\/or marketing cookies respectively. Where consent is withheld, these tools operate in a cookieless, modelled mode that does not set cookies or transmit identifiable data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5. How Do We Use Your Information?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We use the information We collect to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Allow you to create and manage an account on Our Website<\/li>\n\n\n\n<li>Process, fulfil and deliver your orders<\/li>\n\n\n\n<li>Verify the information you have provided<\/li>\n\n\n\n<li>Keep and maintain Our internal business records<\/li>\n\n\n\n<li>Provide customer service and respond to your enquiries<\/li>\n\n\n\n<li>Send you service-related communications about your order or account<\/li>\n\n\n\n<li>Send you marketing communications, where you have given your consent or where We have a legitimate interest in doing so<\/li>\n\n\n\n<li>Deliver targeted advertising and measure its effectiveness, where you have given your consent<\/li>\n\n\n\n<li>Analyse website usage and improve the Website and Our services<\/li>\n\n\n\n<li>Detect and prevent fraud and abuse<\/li>\n\n\n\n<li>Comply with Our legal and regulatory obligations<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We will not use your data for any new purpose that is incompatible with the purposes for which it was collected without first notifying you and, where required, obtaining your consent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6. Lawful Basis for Processing<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We only process your personal data where We have a lawful basis to do so under Article 6 of the GDPR\/UK GDPR. The table below sets out the lawful basis We rely on for each processing activity.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Processing Activity<\/strong><\/td><td><strong>Lawful Basis (Art. 6)<\/strong><\/td><td><strong>Notes<\/strong><\/td><\/tr><tr><td>Account creation and management<\/td><td>Contract \u2014 Art. 6(1)(b)<\/td><td>Necessary to perform Our contract with you<\/td><\/tr><tr><td>Processing and fulfilling orders<\/td><td>Contract \u2014 Art. 6(1)(b)<\/td><td>Necessary to perform Our contract with you<\/td><\/tr><tr><td>Customer service and enquiry handling<\/td><td>Contract \u2014 Art. 6(1)(b) \/ Legitimate interests \u2014 Art. 6(1)(f)<\/td><td>Depends on whether query relates to an existing order<\/td><\/tr><tr><td>Maintaining internal business records<\/td><td>Legitimate interests \u2014 Art. 6(1)(f)<\/td><td>LIA held on file with the DPO<\/td><\/tr><tr><td>Direct marketing communications<\/td><td>Consent \u2014 Art. 6(1)(a)<\/td><td>You may withdraw consent at any time<\/td><\/tr><tr><td>Website analytics (Google Analytics)<\/td><td>Consent \u2014 Art. 6(1)(a)<\/td><td>Obtained via Cookiebot before any analytics cookies are set<\/td><\/tr><tr><td>Targeted advertising (Facebook, Google Ads)<\/td><td>Consent \u2014 Art. 6(1)(a)<\/td><td>Obtained via Cookiebot before any marketing cookies are set<\/td><\/tr><tr><td>CRM service messages (Klaviyo)<\/td><td>Legitimate interests \u2014 Art. 6(1)(f)<\/td><td>Service messages about your order or account. LIA held on file<\/td><\/tr><tr><td>CRM marketing messages (Klaviyo)<\/td><td>Consent \u2014 Art. 6(1)(a)<\/td><td>Only where you have given express consent to marketing<\/td><\/tr><tr><td>Fraud prevention and site security<\/td><td>Legitimate interests \u2014 Art. 6(1)(f)<\/td><td>LIA held on file with the DPO<\/td><\/tr><tr><td>Compliance with legal obligations<\/td><td>Legal obligation \u2014 Art. 6(1)(c)<\/td><td>e.g.&nbsp;tax and regulatory requirements<\/td><\/tr><tr><td>Business sale or transfer<\/td><td>Legitimate interests \u2014 Art. 6(1)(f)<\/td><td>Disclosure to prospective buyers as part of due diligence<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Where We rely on legitimate interests as Our lawful basis, We have carried out a Legitimate Interests Assessment (LIA) to confirm that Our interests do not override your rights and interests. A copy of any relevant LIA is available on request from the DPO at dpo@healthxchange.com.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7. How Do We Handle Your Information?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7.1 Security<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The data and information We collect from you is transferred to and securely stored by Our hosting provider. We are committed to ensuring that your information is protected. In order to prevent unauthorised access or disclosure, We have put in place suitable physical, electronic and managerial procedures, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Storage of all data on secure servers<\/li>\n\n\n\n<li>Encryption of payment transactions using SSL\/TLS technology<\/li>\n\n\n\n<li>Password protection of relevant areas of the Website (you are responsible for keeping your password confidential)<\/li>\n\n\n\n<li>Secure erasure and destruction of data when no longer required<\/li>\n\n\n\n<li>Regular review and updating of Our security procedures<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7.2 Your Responsibilities<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where We have given you (or where you have chosen) a password that enables you to access certain parts of Our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8. International Data Transfers<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Your personal data may be transferred to and processed by third-party service providers located outside the European Economic Area (EEA) or United Kingdom, including to the United States. The following third-party tools may involve international transfers of personal data:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Service<\/strong><\/td><td><strong>Provider<\/strong><\/td><td><strong>Location<\/strong><\/td><td><strong>Transfer Mechanism<\/strong><\/td><\/tr><tr><td>Google Analytics \/ Ads<\/td><td>Google LLC<\/td><td>USA<\/td><td>Standard Contractual Clauses (SCCs)<\/td><\/tr><tr><td>Facebook\/Meta Pixel<\/td><td>Meta Platforms Inc.<\/td><td>USA<\/td><td>Standard Contractual Clauses (SCCs)<\/td><\/tr><tr><td>Klaviyo<\/td><td>Klaviyo Inc.<\/td><td>USA<\/td><td>Standard Contractual Clauses (SCCs)<\/td><\/tr><tr><td>ActiveCampaign<\/td><td>ActiveCampaign LLC<\/td><td>USA<\/td><td>Standard Contractual Clauses (SCCs)<\/td><\/tr><tr><td>ContentSquare<\/td><td>Contentsquare SAS<\/td><td>France\/USA<\/td><td>SCCs \/ EU adequacy decision<\/td><\/tr><tr><td>Hosting<\/td><td>Linode (Akamai)<\/td><td>Frankfurt, Germany<\/td><td>Within the EEA \u2014 no transfer<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Where personal data is transferred outside the EEA or UK, We ensure that appropriate safeguards are in place, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission, or that a UK adequacy decision applies. Further details are available on request from the DPO.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9. Data Retention<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected. The table below sets out Our standard retention periods. Where a legal obligation requires a longer period, We will retain data for that period instead.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Data Category<\/strong><\/td><td><strong>Retention Period<\/strong><\/td><td><strong>Reason<\/strong><\/td><\/tr><tr><td>Customer account information<\/td><td>Duration of account + 6 years<\/td><td>Limitation period for contractual claims<\/td><\/tr><tr><td>Order records<\/td><td>6 years from date of order<\/td><td>Contract limitation period<\/td><\/tr><tr><td>Payment and financial records<\/td><td>7 years from transaction date<\/td><td>Revenue \/ tax obligations<\/td><\/tr><tr><td>Marketing consent records<\/td><td>Until consent withdrawn + 1 year<\/td><td>To demonstrate consent was validly obtained<\/td><\/tr><tr><td>Analytics data (Google Analytics)<\/td><td>26 months<\/td><td>Google Analytics default retention setting<\/td><\/tr><tr><td>Customer service correspondence<\/td><td>3 years from resolution<\/td><td>Limitation period for complaints<\/td><\/tr><tr><td>Fraud prevention records<\/td><td>6 years<\/td><td>Limitation period \/ regulatory requirement<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">In some circumstances We will anonymise your personal data so that it can no longer be associated with you, in which case We may use such anonymised data indefinitely without further notice.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10. To Whom May We Disclose Your Information?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10.1 General<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We may share your personal data where necessary for the purposes described in Section 5 with:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Our employees, agents and Data Processors who are contractually required to process your data only on Our instructions and in accordance with applicable data protection law<\/li>\n\n\n\n<li>Third-party service providers and sub-contractors engaged to perform services on Our behalf (including website hosting, payment processing, order fulfilment, email marketing and analytics)<\/li>\n\n\n\n<li>Analytic and search engine providers that assist Us in improving and optimising Our Website<\/li>\n\n\n\n<li>Payment card merchants who comply with PCI\/DSS requirements<\/li>\n\n\n\n<li>Any other third parties to whom We are legally obliged to disclose your information<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10.2 Third-Party Advertising and Analytics Platforms<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where you have given your consent via Cookiebot, your data may be shared with the following third-party platforms for advertising and analytics purposes: Google LLC (Google Analytics, Google Ads), Meta Platforms Inc.&nbsp;(Facebook Pixel), Klaviyo Inc., ActiveCampaign LLC, and Contentsquare SAS. Please refer to the respective privacy policies of these providers for further details of how they process your data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10.3 Business Transfers<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We may disclose or transfer your personal data to a third party in the event of a sale, merger, acquisition, or other corporate transaction involving Our business or assets. In such circumstances, We will take reasonable steps to ensure that any acquirer is subject to appropriate data protection obligations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10.4 Legal Requirements<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We may disclose your personal data where We are under a legal duty to do so, or where necessary to enforce Our terms of use, or to protect the rights, property or safety of Our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud prevention and credit risk reduction.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10.5 Standards of Care<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We will only disclose your personal data to parties who provide sufficient guarantees regarding the protection and appropriate handling of personal data, and who have sufficient privacy and security measures in place.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>11. Your Rights<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>11.1 Summary of Rights<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Under the GDPR and UK GDPR, you have the following rights in relation to your personal data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Right of access \u2014 you may request a copy of the personal data We hold about you<\/li>\n\n\n\n<li>Right to rectification \u2014 you may ask Us to correct inaccurate or incomplete data<\/li>\n\n\n\n<li>Right to erasure \u2014 you may ask Us to delete your personal data in certain circumstances<\/li>\n\n\n\n<li>Right to restriction \u2014 you may ask Us to restrict processing of your data in certain circumstances<\/li>\n\n\n\n<li>Right to data portability \u2014 you may request a copy of certain data in a structured, machine-readable format<\/li>\n\n\n\n<li>Right to object \u2014 you may object to processing based on legitimate interests or direct marketing<\/li>\n\n\n\n<li>Rights relating to automated decision-making \u2014 you have the right not to be subject to decisions made solely by automated means where those decisions have a significant effect on you<\/li>\n\n\n\n<li>Right to withdraw consent \u2014 where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>11.2 Right to Object<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where We process your personal data on the basis of Our legitimate interests (Article 6(1)(f)), you have the right to object at any time. If you object, We will cease processing unless We can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for legal claims. To exercise this right, please contact the DPO (see Section 1.3).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>11.3 Marketing<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You may opt out of receiving marketing communications from Us at any time by:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Clicking the \u201cUnsubscribe\u201d link in any marketing email We send<\/li>\n\n\n\n<li>Contacting the DPO at dpo@healthxchange.com<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Opting out of marketing will not affect service-related communications relating to your orders or account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>11.4 Cookie Consent<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can manage or withdraw your cookie consent at any time via the \u201cManage Cookies\u201d link in the footer of Our Website. You may also control cookies by adjusting your browser settings, though this may affect the functionality of the Website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>11.5 How to Exercise Your Rights<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To exercise any of the above rights, please contact Our DPO at dpo@healthxchange.com or write to the address in Section 1.3. There is normally no charge. We will respond within one calendar month. We may ask you to verify your identity before acting on your request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>12. Changes to This Policy<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We reserve the right to update this Privacy Policy from time to time. When We make changes, We will update the \u201cLast reviewed\u201d date at the top of this page. We encourage you to review this Policy periodically to stay informed about how We are protecting your personal data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Your continued use of Our Website following any changes constitutes your acknowledgement of the updated Policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>13. Your Right to Complain<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you believe that We are not handling your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For EU residents:<\/strong> Irish Data Protection Commission (DPC), 6 Pembroke Row, Dublin 2, D02 X963, Ireland \u2014 www.dataprotection.ie<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For UK residents:<\/strong> Information Commissioner\u2019s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom \u2014 www.ico.org.uk<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We would appreciate the opportunity to address your concerns before you contact the supervisory authority, so please contact Our DPO in the first instance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Clever Aesthetic Tech Limited (trading as Pure Obagi) | Unit 16 The Exchange, Calmount Business Park, Ballymount, Dublin, D12 RF43, Ireland | Company No.&nbsp;676949 | dpo@healthxchange.com<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Clever Aesthetic Tech Limited (trading as Pure Obagi)www.pureobagi.comLast reviewed: June 2026 Contents 1. About Us and This Policy Clever Aesthetic Tech Limited, trading as \u201cPure Obagi\u201d (\u201cWe\u201d, \u201cUs\u201d, \u201cOur\u201d), is committed to protecting your personal data. This Privacy Policy explains how We collect, use, store and share your personal data when you use Our website [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-4238","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/pureobagi.com\/en\/wp-json\/wp\/v2\/pages\/4238","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pureobagi.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pureobagi.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pureobagi.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pureobagi.com\/en\/wp-json\/wp\/v2\/comments?post=4238"}],"version-history":[{"count":11,"href":"https:\/\/pureobagi.com\/en\/wp-json\/wp\/v2\/pages\/4238\/revisions"}],"predecessor-version":[{"id":108056,"href":"https:\/\/pureobagi.com\/en\/wp-json\/wp\/v2\/pages\/4238\/revisions\/108056"}],"wp:attachment":[{"href":"https:\/\/pureobagi.com\/en\/wp-json\/wp\/v2\/media?parent=4238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}