Cookies and other technologies
This Cookies Policy sets out important information in relation to the cookies and other similar technologies that Bupa (we, us or our) uses on this website (bupa.com) (our website) and should be read alongside our Privacy Notices.
Cookies and other technologies
When you use our website, we and third-party companies collect information by using cookies and other technologies such as pixel tags (for simplicity we refer to all such technologies as 'cookies').
- A cookie is a text file containing small amounts of information which a server may download and store to your computer, mobile or tablet when you visit a website or use an app. Cookies are generated by web servers when you enter a site and are passed to your computer or mobile device and stored for subsequent future access.
- A pixel tag (sometimes called a web beacon) is an invisible image with a line of code which is placed within an email message or on a web page.
There are different types of cookies which are used to do different things. These include letting you navigate between different pages on a website efficiently, remembering preferences you have given and helping us to identify ways to improve your overall site experience. Others are used to provide you with advertising, which is more tailored to your interests, or to measure the number of site visits and determine the most popular pages.
To help you understand the different types of cookies we use on this website and what they do, we have grouped cookies into four categories as described in the ‘Types of cookies used on our website’ section below.
Information collected via cookies and other technology
The cookies used on this site do not collect directly identifiable personal information such as name, address, email address etc. However, certain cookies may collect information which relate to a unique ID or another identifier (such as IP address) which, when combined with other information, allow a profile to be created.
Types of cookies used on our website
We use the following types of cookies on our website: strictly necessary cookies, performance cookies, functionality cookies, and targeting cookies. Detailed descriptions of each type of cookie are set out below.
As well as the cookies we use, we work with third-party companies who place cookies on your device. Please note that the data third parties collect may also be subject to their privacy policies. When working with third-party companies we take steps to protect your data. For example, we may place contractual limits on how data collected about people using our services is used and we regularly audit our website to make sure only cookies we have authorised are being used.
Strictly necessary cookies cannot be turned off. Please see our cookies management tool to control the types of cookies used on our website.
Strictly necessary cookies
Strictly necessary cookies are essential to the operation of our website. They let you move around the website and use essential features. None of the information about you which is gathered by these cookies is used for marketing and these cookies do not track where you've been on the internet. As these cookies are necessary for the functioning of our website, they are always enabled because otherwise our website would not work properly.
Analytical/Performance cookies
These cookies collect information about how visitors use and interact with our website by collecting and analysing various data, sometimes referred to as "web analytics" information, including:
- details of the site where the visitor has come from (e.g. referring domains, search engines, marketing campaigns)
- pages viewed
- the site path of the visitor
- which content visitors are clicking on
- which products visitors are interested in and purchase
- the total number of times a visitor has been to our website
- how long a visitor spends on the website and at what point visitors leave the website
We use and analyse this information to improve our website and enhance the experience of visitors. We may share this information with analytics and search engine providers that assist us in the improvement and optimisation of our site.
Functionality cookies
These cookies allow our website to remember choices you make (such as the region you are in) and provide enhanced, more personalised features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of the website that you can customise. They may also be used to provide functionality you have asked for such as watching a video. These cookies cannot track your browsing activity on other websites.
Targeting cookies
These cookies are used to collect information about your browsing habits to deliver advertising more relevant to you and your interests. The personalisation of ads may be based on data collected from these cookies about your use of our services (for example what pages you visit) and other data attributed to you by the ad platform. These include data points such as interests, age, gender and similar statistical characteristics inferred from internet browsing or marketing data that an advertiser holds about you.
How do I change my cookies settings?
When visiting the website for the first time, you will be presented with a cookie pop up which provides you with information about the cookies listed in this Cookies Policy and gives you the ability to set your cookie preferences by consenting to the cookies listed in this Cookies Policy, other than those cookies which are strictly necessary.
You can change your cookies preferences (other than in respect of strictly necessary cookies) at any time by using the cookies management tool.
It is also possible to disable and to delete/remove cookies on most web browsers. For more information visit the browser's developer's website.
| Name | Description | Category | Expiry |
|---|---|---|---|
| ASP.NET_SessionId | General purpose platform session cookie, used by sites written with Microsoft .NET based technologies. Usually used to maintain an anonymised user session by the server. | Strictly necessary | Session cookie - expires when the browser is closed. |
| _cfuvid | Used by Cloudflare’s security features to identify individual clients behind a shared IP address and apply rate limits to maintain site performance and prevent abuse. Does not track users across sites. | Strictly necessary | Session cookie - expires when the browser is closed. |
| __cf_bm | This cookie used is to distinguish between legitimate human users and potentially harmful automated traffic, such as bots, automated scripts, and crawlers by enabling technology which assesses various factors such as browsing behaviour, device information, and IP address. The cookie contains information related to the calculation of Cloudflare’s proprietary bot score. and, when Anomaly Detection is enabled on Bot Management, a session identifier. The automated decision process allows or denies access based on the Bot Score generated. | Strictly necessary | 30 minutes |
| __CookieConsentV300 | This cookie name is associated with a JavaScript plugin which is used to comply with EU guidelines and alert users of the use of cookies on the website. | Strictly necessary | 180 days |
| TESTCOOKIESENABLED | Used by YouTube to check if the user's browser supports cookies before setting other YouTube cookies. Does not contain identifiable data. | Strictly necessary | A few seconds |
| _hjid | Hotjar cookie. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behaviour in subsequent visits to the same site will be attributed to the same user ID. For more details, please see Hotjar’s privacy policy. | Performance cookie | 1 year |
| _hjFirstSeen | Identifies a new user's first session on a website, indicating whether or not Hotjar is seeing this user for the first time. | Performance cookie | Session cookie - expires when the browser is closed. |
| _hjAbsoluteSessionInProgress | Used to detect a user’s first pageview session. This allows Hotjar to determine if the visitor is new or returning during a session for analytics purposes. For more details, please review Hotjar’s privacy policy. | Performance cookie | Session cookie - expires when the browser is closed. |
| _hjSession_3796745 | A cookie that holds the current session data. This ensures that subsequent requests within the session window will be attributed to the same Hotjar session. | Performance cookie | Session cookie - expires when the browser is closed. |
| _hjIncludedInSessionSample | Used by Hotjar to detect a user’s first pageview session. This helps identify whether the visitor is new or returning within a single session for analytics purposes. | Performance cookie | Session cookie - expires when the browser is closed. |
| _hjIncludedInPageviewSample | Set by Hotjar to determine if a visitor is included in the pageview sampling used to generate analytics. This helps ensure consistent sampling across visits. | Performance cookie | Session cookie - expires when the browser is closed. |
| _hjSessionUser_3796745 | This cookie is set by Hotjar to assign a persistent, unique user ID for the website. It allows Hotjar to identify returning visitors across sessions for analytics purposes. | Performance cookie | Session cookie - expires when the browser is closed. |
| _ga_X0DMN3ZT1G | Used by Google Analytics to identify and track an individual session with your device. | Performance cookie | Session cookie - expires when the browser is closed. |
| _ga_V1VQCPSY6V | Used by Google Analytics to identify and track an individual session with your device. | Performance cookie | 720 days |
| _ga | This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sitessite’s analytics reports. By defaultdefault, it is set to expire after 2 years, although this is customisable by website owners. For more information about Google's processing of your personal data, please consult Google's privacy policy. | Performance cookie | 2 years |
| vuid | This cookie is set by Vimeo, a video-hosting platform, to collect analytics data on how visitors interact with videos embedded on a website. It assigns a unique ID to each user to track video viewing behaviour and performance metrics. The information gathered helps Vimeo improve its video delivery and user experience. | Functional cookie | Session cookie - expires when the browser is closed. |
| AWSALBCORS | This cookie is set by Amazon Web Services’ Application Load Balancer to ensure that requests are consistently routed to the same server during a user’s session. In some cases, it may also be used to attribute affiliate commissions when a visitor arrives via an affiliate referral link. This helps identify the referring website and enables accurate tracking of referral activity. The cookie supports reliable website performance and cross-origin resource sharing (CORS). | Functional cookie | 6 days |
| AWSALBTG | This cookie is set by Amazon Web Services’ Application Load Balancer to maintain consistent routing of user requests to the same backend server during a session. In some implementations, it is also used to attribute affiliate commissions when users arrive via referral links. This helps identify the originating website and ensures accurate affiliate tracking while supporting stable site performance and load balancing. | Functional cookie | 6 days |
| AWSALBTGCORS | This cookie is set by Amazon Web Services’ Application Load Balancer to maintain consistent routing of user requests to the same backend server, ensuring site reliability and performance. It also supports cross-origin resource sharing (CORS) requests. In some cases, it may be used to attribute affiliate commissions by identifying the referring website when a user arrives through an affiliate link. | Functional cookie | 6 days |
| AWSALB | This cookie is set by Amazon Web Services’ Elastic Load Balancer (ELB) to distribute incoming traffic across multiple servers, ensuring optimal website performance and reliability. It helps maintain a consistent user experience by directing each session to the same backend server. This cookie supports load balancing functionality and improves site stability. | Functional cookie | 6 days |
| countryName | This cookie is used to store the user’s country information. This allows the website to display region-specific content, settings, or language preferences, helping provide a more localized and relevant user experience. | Targeting cookie | Session cookie - expires when the browser is closed. |
| _lfa | This cookie is used by Leadfeeder to track visitor behaviour on the website to build visitor profiles for improving site analytics and marketing effectiveness. | Targeting cookie | Session cookie - expires when the browser is closed. |
| VISITOR_PRIVACY_METADATA | This cookie is set by YouTube, a video-hosting platform owned by Google. It helps manage user privacy settings and preferences related to embedded YouTube videos on a website. YouTube collects data from visitors interacting with these embedded videos and combines it with profile data from other Google services to deliver targeted advertising across Google’s network of sites and third-party websites. | Third party targeting cookie | 5 months |
| __Secure-YEC | This cookie is set by YouTube to manage and track user interaction with embedded videos and advertisements. It helps measure engagement and supports personalized advertising by ensuring ads are relevant to user interests. This cookie typically persists for an extended period and is used as part of Google’s broader ad delivery and measurement services. | Third party targeting cookie | Few seconds |
| YSC | YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. | Third party targeting cookie | Session cookie - expires when the browser is closed. |
| __Secure-YNID | YouTube is a Google owned platform for hosting and sharing videos. YouTube collects user data through videos embedded in websites, which is aggregated with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other websites. | Third party targeting cookie | 5 months |
| __Secure-ROLLOUT_TOKEN | This cookie is set by YouTube, a video-hosting platform owned by Google. It is used to manage feature rollouts and ensure the proper functioning of YouTube’s embedded video services. This cookie helps maintain consistent performance and user experience when new YouTube features are introduced or tested. While it may interact with other Google services, its primary purpose is functional rather than for advertising. | Third party targeting cookie | 5 months |
| VISITOR_INFO1_LIVE | This cookie is set by YouTube to track user preferences and behaviour for embedded videos on websites. It is used as a unique identifier to measure viewing activity and determine bandwidth, helping YouTube optimize video playback performance. The data collected may also be used to deliver personalized advertising across Google’s network of websites. | Third party targeting cookie | 5 months |
| NID | Used by Google to store user preferences and to personalise ads on Google websites, based on recent searches and interactions. | Third party targeting cookie | 6 months |
Cookies and other technologies
Further information
The UK's data protection regulator, the Information Commissioner's Office, has further guidance on cookies.