The Body Shop Cookie Policy
Effective Date: August 2026
This Cookie Policy (“Policy”) describes the different categories of cookies or similar technologies (“Cookies”) that may be used by Cart.com, Inc. in connection with the The Body Shop site or application you are accessing or using (“Site/Application”) and how you can manage them.
Please note that, to the extent information collected through Cookies constitutes personal data, we process such data in accordance with our Privacy Notice.
What are Cookies?
Cookies are text files containing small amounts of information, which are downloaded to your computer or mobile device by websites/applications that you visit.
Who sets Cookies?
- First-party Cookies: When you visit our Site/Application, it asks your browser to store cookies on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us.
- Third-party Cookies: We also have Cookies on our Site/Application that are set by third parties. These are Cookies from a domain different than the domain of our Site/Application you are visiting. We use these third-party Cookies for, among other things, our advertising and marketing efforts.
How long will Cookies remain on my device?
The length of time that a Cookie remains on your device depends on whether it is a “session” or “persistent” Cookie.
- Session Cookies last until you stop browsing. These are created temporarily. Once you close the browser, all session cookies are deleted.
- Persistent Cookies last until they expire or are deleted.
See the section below (“Managing Cookies”) on how to manage Cookies and for more information on removing them before they expire.
How do we use Cookies?
Cookies serve a variety of purposes. They allow us to learn about use of our online services for the purpose of improving services, developing products and services, understanding users’ habits and satisfaction, and improving the functioning of our Site/Application. They also allow us to improve the browsing experience for users by customizing the Site/Application for users, facilitating navigation between webpages, saving content, and remembering users’ preferences.
Types of Cookies we use on our Site/Application and for what purpose
We use the following types of Cookies on our Site/Application:
Strictly Necessary Cookies
These cookies are fundamental in making our Site/Application work. For example, they enable basic functionality such as security and website accessibility. These cookies do not collect or store any personal data.
Analytics Cookies
These Cookies allow us to employ data analytics so we can measure and improve the performance of our Site/Application and provide more relevant content to you. For example, these Cookies may allow us to measure user engagement with our Site/Application and statistics related to our Site/Application. Such information helps us to understand how our Site/Application is used, and to enhance the content, quality, and features of the Site/Application.
Performance Cookies
These Cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Site/Application. They assist us in understanding which pages are the most and least favoured, and how visitors move around the Site/Application. All information these Cookies collect is aggregated and therefore anonymous.
Functional Cookies
These Cookies enable our Site/Application to provide functionality and personalization and they allow the Site/Application to remember choices you make and customised preference settings (e.g., language choices or preferred text size). These Cookies collect anonymous information and cannot track your movements on other sites. If you do not allow these Cookies, then some or all of our Site/Application may not function properly.
Targeting Cookies
These Cookies collect information about your browsing habits to make advertising relevant to you and your interests. They may be set through our Site/Application and/or by our third-party advertising partners. They may be used by those third parties to build a profile of your interests and show you relevant adverts on other sites. These Cookies may collect certain information about your devices, such as unique device identifiers, IP addresses, and browsing activity. If you do not allow these Cookies, you will experience less targeted advertising.
In the below table we list the Cookies we use on our Site/Application, the purposes for which we use them and their lifespan:
| Type/Category | Name | Host | Purpose | Duration |
|---|---|---|---|---|
| Strictly Necessary | _shopify_essential | us.thebodyshop.com | Maintains your session and enables secure checkout. | 1 year |
| Strictly Necessary | cart | us.thebodyshop.com | Stores the contents of your shopping cart. | 2 weeks |
| Strictly Necessary | cart_currency | us.thebodyshop.com | Remembers the currency selected for your cart. | 2 weeks |
| Strictly Necessary | shopify_client_id | us.thebodyshop.com | Identifies your browser to support core store functions. | 1 year |
| Strictly Necessary | datagrail_consent_id | us.thebodyshop.com | Stores a unique identifier for your cookie-consent record. | 1 year |
| Strictly Necessary | datagrail_consent_preferences | us.thebodyshop.com | Remembers the cookie categories you have accepted or declined. | 1 year |
| Strictly Necessary | datagrail_consent_version | us.thebodyshop.com | Records the version of the consent banner you responded to. | 1 year |
| Strictly Necessary | rCookie | .thebodyshop.com | Riskified — fraud prevention; identifies your browser to screen orders for fraud. | 13 months |
| Strictly Necessary | rskxRunCookie | .thebodyshop.com | Riskified — fraud prevention; controls when the fraud-screening script runs. | 1 year |
| Strictly Necessary | lastRskxRun | .thebodyshop.com | Riskified — fraud prevention; records when the fraud-screening script last ran. | 1 year |
| Analytics | _ga | .thebodyshop.com | Google Analytics — distinguishes individual users. | 2 years |
| Analytics | _ga_8PPJMV94GS | .thebodyshop.com | Google Analytics 4 — persists session state. | 2 years |
| Analytics | _ga_BSTENPTXD2 | .thebodyshop.com | Google Analytics 4 — persists session state. | 2 years |
| Analytics | _ga_BT1P2BPDYY | .thebodyshop.com | Google Analytics 4 — persists session state. | 2 years |
| Analytics | _shopify_analytics | us.thebodyshop.com | Shopify — collects analytics on how you use the store. | 1 year |
| Analytics | _shopify_s | .thebodyshop.com | Shopify — tracks your current browsing session for analytics. | 30 minutes |
| Analytics | _shopify_y | .thebodyshop.com | Shopify — identifies your browser across visits for analytics. | 1 year |
| Analytics | _sp_id.e564 | .thebodyshop.com | Snowplow — identifies a unique visitor for analytics. | 2 years |
| Analytics | _sp_ses.e564 | .thebodyshop.com | Snowplow — identifies the current analytics session. | 30 minutes |
| Performance | _clck | .thebodyshop.com | Microsoft Clarity — retains the Clarity user ID and settings. | 1 year |
| Performance | _clsk | .thebodyshop.com | Microsoft Clarity — groups a session's page views to measure performance. | 1 day |
| Performance | CLID | www.clarity.ms | Microsoft Clarity — identifies first-time visitors. | 1 year |
| Functional | localization | us.thebodyshop.com | Shopify — remembers your selected country/region. | 1 year |
| Functional | yotpo_pixel | us.thebodyshop.com | Yotpo — supports reviews and loyalty features by identifying your browser. | 1 year |
| Functional | pixel | .yotpo.com | Yotpo — supports reviews and loyalty program functionality. | 1 year |
| Functional | _ruid | us.thebodyshop.com | Rebuy — identifies your browser to power product recommendations and personalization. | 1 year |
| Functional | _rsession | us.thebodyshop.com | Rebuy — identifies the current session for product recommendations and personalization. | Session |
| Targeting | __kla_id | us.thebodyshop.com | Klaviyo — identifies your browser for email/SMS marketing. | 2 years |
| Targeting | _shopify_marketing | us.thebodyshop.com | Shopify — supports marketing attribution. | 1 year |
| Targeting | _fbp | .thebodyshop.com | Meta (Facebook) — delivers and measures advertising. | 3 months |
| Targeting | _gcl_au | .thebodyshop.com | Google Ads — measures ad conversions (conversion linker). | 3 months |
| Targeting | _pin_unauth | us.thebodyshop.com | Pinterest — measures ad conversions for logged-out users. | 1 year |
| Targeting | _tt_enable_cookie | .thebodyshop.com | TikTok — enables the advertising pixel. | 1 year |
| Targeting | _ttp | .tiktok.com | TikTok — measures and targets advertising. | 1 year |
| Targeting | ttcsid | .thebodyshop.com | TikTok — supports conversion measurement. | 1 year |
| Targeting | ttcsid_D2N2QRJC77U0LO3A2QPG | .thebodyshop.com | TikTok — conversion session identifier. | 1 year |
| Targeting | _uetsid | .thebodyshop.com | Microsoft Advertising (Bing) — session identifier for conversion tracking. | 1 day |
| Targeting | _uetvid | .thebodyshop.com | Microsoft Advertising (Bing) — visitor identifier for conversion tracking. | 13 months |
| Targeting | MUID | .clarity.ms / .bing.com | Microsoft — identifies your browser for advertising and analytics. | 13 months |
| Targeting | MR | .c.bing.com | Microsoft (Bing) — indicates whether to refresh the MUID. | 1 week |
| Targeting | SRM_B | .c.bing.com | Microsoft (Bing) — part of the advertising identifier. | 13 months |
| Targeting | SM | .c.clarity.ms | Microsoft — synchronizes the MUID across Microsoft domains. | Session |
| Targeting | ANONCHK | .c.clarity.ms | Microsoft — validates and stores the MUID for ad measurement. | 1 day |
| Targeting | guid | .mountain.com | MNTN — identifies your browser for connected-TV advertising. | 1 year |
| Targeting | rt | .mountain.com | MNTN — supports advertising measurement. | 1 year |
| Targeting | _Elevar-apex | .thebodyshop.com | Elevar — server-side marketing data layer / conversion tracking. | 1 year |
| Targeting | _axwrt | .thebodyshop.com | AddShoppers (SafeOpt) — identity-based marketing identifier. | 1 year |
| Targeting | _ax_last_event | .thebodyshop.com | AddShoppers (SafeOpt) — records the timestamp of your last tracked event. | 1 year |
| Targeting | _ax_session_data | .thebodyshop.com | AddShoppers (SafeOpt) — stores marketing session activity. | 1 year |
| Targeting | ax_visitor | .thebodyshop.com | AddShoppers (SafeOpt) — stores visitor first/last visit data. | 1 year |
Managing Cookies
You can manage or disable Cookies (except for strictly necessary Cookies) at any time by visiting our Cookie management tool available on our Site/Application and here. Browsers are different, so you should refer to the settings menu of your browser for instructions on how to change your Cookie preferences. If you choose not to receive Cookies, our Site/Application may not function properly and certain services may not be available.
To find out more information about Cookies in general and how to manage them, visit the website www.allaboutcookies.org.
Changes to this Policy
Cart.com, Inc. may amend this Policy from time to time. Please observe the effective date at the top of this page to see when this Policy was last revised. Changes to this Policy will be effective when we make available the revised version to our Site/Application.
Contact us
If you have any questions, comments, or requests regarding our use of Cookies or this Policy more generally, please contact us at:
support@us.thebodyshop.com844-602-2278
1334 Brittmoore Rd., Suite 225
Houston, TX 77043