The Body Shop is fully committed to the responsible collection, use, and care of the Personal Data of individuals. This Cookies Policy (“Policy”) describes the different categories of cookies or similar technologies (“Cookies”) that may be used in connection with The Body Shop site or application you are accessing (“Site/Application”) and how you can manage them.

Please note that, to the extent information collected through cookies constitutes Personal Data, we process such Data according to our Privacy Notice. If you have a query about how your Personal Data is being used, you can contact the data controller through the Data Protection Officer (DPO) team here.

We use cookies on our Site/Application, which amongst other things, help us to improve your experience of our Site/Application and to ensure that it performs as you expect it to.

What is a cookie?

Cookies are text files containing small amounts of information, which are downloaded to your computer or mobile device by websites/applications that you visit.

Who sets the cookie?

• First-party cookies: When you visit our Site/Application, it asks your browser to store cookies on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us.
• Third-party cookies: We also have cookies on our Site/Application that are set by third parties. These are cookies from a domain different than the domain of our Site/Application you are visiting. We use these third-party cookies for our advertising and marketing efforts.

How long will cookies remain on my device?

The length of time that a cookie remains on your device depends on whether it is a “session” or “persistent” cookie.

• Session cookies last until you stop browsing. These are created temporarily. Once you close the browser, all session cookies are deleted.
• Persistent cookies last until they expire or are deleted.

Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device. See the following section on how to manage cookies and for more information on removing them before they expire.

Your Control Over the Cookies

• We must get your consent to send cookies to your computer or mobile device unless the cookies are strictly necessary to provide services to you or the applicable laws allow otherwise. The cookies do not store any info that could personally identify you. When these cookies collect Personal Data, the lawful basis for such processing is our legitimate business interests, according to the applicable laws.
• You can refuse or accept cookies from our Site/Application and set your cookie preferences when you first arrive at our Site/Application or change them at any time by clicking the ‘Manage my cookie preferences’ button below.
• Alternatively, you can use the cookies settings on your browser. Relevant information on browser settings can be also found on your browser provider's website via your help screen or you may wish to refer to the following site, which is not affiliated with us, for information on commonly used browsers.
• Unless the cookie is a strictly necessary cookie, you can withdraw your consent to our cookies at any time even if you have previously consented. Please be aware that when you withhold your consent, this does not automatically delete any cookies that are already on your device pursuant to your previous consent. You will need to delete these cookies manually by following the instructions on your web browser and/or device.

Contact us: The Body Shop may amend this Policy from time to time. Please observe the date at the end of this page to see when this Policy was last revised. Changes to this Policy will be effective when we make available the revised version to our Site/Application.

Please direct all questions, comments or, requests regarding this Policy to the DPO team here.

EFFECTIVE DATE: April 2023