Cookie policy

QOSH uses as few cookies as possible. Under the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR, we set non-essential (analytics) cookies only after you consent; strictly necessary cookies are used without consent because the service cannot function without them.

Strictly necessary

• qosh_session — keeps a QOSH administrator signed in to the CMS. Not used on the public site.
• qosh_partner — keeps an Approved Training Centre signed in to the partner portal.

Both are set with the HttpOnly, Secure and SameSite=Strict attributes, are used only to maintain a signed-in session, and are never used for tracking or advertising.

Consent

• qosh-consent — remembers whether you accepted or declined analytics so we don't ask again for six months.

Analytics (only after you accept)

• _ga, _ga_* — Google Analytics 4, set only once you accept analytics cookies. Used to count pageviews and understand which pages are useful. IP anonymisation is enabled; Google typically retains these for up to two years.

Managing cookies

You can decline analytics from the banner shown on your first visit. To change your choice later, clear cookies for qosh.org in your browser and reload the site so the banner reappears, or block and delete cookies through your browser settings. See our Privacy policy for how we handle personal data.