1. About this Policy
This Cookie Policy explains how Yoshe Clinical Operations uses cookies and similar technologies on the Yoshe TriQ™ Learning Management System (the "LMS" or the "Platform") and our related websites at yosheclinical.com and yoshe.co.uk. It should be read together with our Privacy Policy and Terms & Conditions.
In this Policy, "Yoshe", "we", "us" and "our" refer to the relevant Yoshe Clinical Operations entity described in the Privacy Policy. "Cookies" is used as a convenient shorthand for cookies and the similar technologies described in section 2.
2. What cookies and similar technologies are
A cookie is a small text file that a website places on your device to store information — for example, to keep you signed in, remember a preference, or understand how the site is used. Cookies may be first-party (set by us) or third-party (set by another organisation whose service we use).
We also use technologies that work like cookies, and we treat them under the same rules:
- Local and session storage — small amounts of data stored in your browser to support the working of the Platform (for example, holding your session securely between pages).
- Pixels / tags / SDKs — small pieces of code, sometimes from third parties, used for analytics or marketing measurement.
Cookies can also be session cookies (deleted when you close your browser) or persistent cookies (kept for a defined period, shown in the tables below).
3. The categories of cookies we use
We group cookies into three categories. Only the first is exempt from consent; the other two are set only after you opt in.
| Category | Purpose | Consent needed? |
|---|---|---|
| Strictly necessary | Essential to provide the Platform and its core security — signing you in, keeping your session secure, load-balancing, remembering your cookie choice, and protecting against fraud and abuse. The Platform cannot function without these. | No — exempt (PECR reg. 6(4); "strictly necessary" exemption) |
| Analytics / performance | Help us understand how the Platform and website are used — which pages are visited, how features perform, and where users encounter problems — so we can improve them. Used in aggregate; we do not use these to build profiles of individual learners. | Yes — opt-in consent |
| Marketing / third-party | Set by us or third parties to measure the effectiveness of our marketing, understand which of our communications are useful, and support related third-party services embedded in our public website. | Yes — opt-in consent |
4. The cookies we use in detail
The tables below list the cookies and similar technologies in each category. Exact names and durations can change as we update the Platform and our providers; we keep the live inventory current through our consent-management tool, and material changes are reflected here at our next review.
4.1 Strictly necessary
| Name / pattern | Set by | Purpose | Duration |
|---|---|---|---|
triq_session | Yoshe (first-party) | Maintains your authenticated session securely between pages | Session |
triq_csrf | Yoshe (first-party) | Protects forms and requests against cross-site request forgery | Session |
triq_auth / token storage | Yoshe (first-party) | Holds the short-lived authentication token that keeps you signed in | Session / short-lived |
triq_cookie_consent | Yoshe (first-party) | Remembers your cookie choices so we don't ask on every visit | 12 months |
| Load-balancer / routing cookie | Hosting provider | Routes your requests to a healthy server for reliability | Session |
4.2 Analytics / performance (consent required)
| Name / pattern | Set by | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics (third-party) | Distinguishes users and sessions to measure site usage in aggregate | Up to 24 months |
_gid | Google Analytics (third-party) | Distinguishes users over a short period for usage measurement | 24 hours |
If you do not consent to analytics cookies, these are not set and the LMS works normally.
4.3 Marketing / third-party (consent required)
| Name / pattern | Set by | Purpose | Duration |
|---|---|---|---|
| Marketing measurement cookies / pixels | Relevant marketing provider (third-party) | Measures the effectiveness of our marketing and which content is useful | Up to 13 months |
| Embedded-content cookies | Third-party content provider(s) | Support media or content embedded in our public website | Varies by provider |
5. Your consent and how to change it
When you first visit, we show a cookie banner before any non-essential cookie is set. In line with UK and EU rules, "Reject all" is as prominent and as easy as "Accept all", and non-essential categories are off by default until you switch them on. We record your choice with a timestamp as evidence of consent.
You can change or withdraw your consent at any time — as easily as you gave it — by:
- opening the "Cookie preferences" link in the website footer to reopen the preference panel; or
- adjusting your browser settings to block or delete cookies (see below).
Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it, and it does not affect strictly necessary cookies, which remain essential to run the Platform.
5.1 Controlling cookies in your browser
Most browsers let you view, block and delete cookies through their settings, and to browse in a private mode. Details for the common browsers are published by their providers (for example, Chrome, Safari, Edge and Firefox each have a "cookies" help page). Please note that blocking strictly necessary cookies may stop parts of the Platform working — including keeping you signed in.
5.2 "Do Not Track" and global signals
Where our consent tool supports a recognised browser-level opt-out signal (such as Global Privacy Control), we honour it for the categories to which it applies.
6. Third-party cookies and international transfers
Some analytics and marketing cookies are set by third parties who act as independent controllers or as our processors for that limited purpose. Their use of data is governed by their own privacy and cookie notices, and we encourage you to review them. We enable such cookies only after you consent.
Where a third-party provider processes data outside the UK or EEA, that transfer is made under an adequacy decision or appropriate safeguards (such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses), consistent with section 3.5 of our Privacy Policy.
7. Regional information
The controls above apply to everyone. This section sets out the additional detail that applies depending on where you are, and should be read together with section 5 of our Privacy Policy.
UK United Kingdom
Our use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) together with the UK GDPR. Non-essential cookies are set only with your consent; strictly necessary cookies are exempt. You can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, though we would welcome the chance to resolve your concern first.
EU European Union / EEA
In the EEA, cookie consent is governed by the ePrivacy Directive as implemented in each Member State, together with the EU GDPR for any personal data processed via cookies. Consent is opt-in, granular and freely given, and may be withdrawn at any time. You may complain to your local supervisory authority; a list is published by the European Data Protection Board (edpb.europa.eu).
US United States
Where a US state privacy law applies, we honour the choices it provides — which may include the right to opt out of certain analytics or "targeted advertising" and, where recognised, to have a browser opt-out signal treated as a valid request. You can exercise these choices through our cookie-preference tool or the browser controls described in section 5.
India India
Where the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 apply to personal data processed through cookies, we rely on consent given by clear affirmative action, provide a plain-language notice at the point of consent, and let you withdraw consent as easily as you gave it. Concerns can be raised with our Grievance Officer at [email protected].
8. Changes to this Policy
We review this Cookie Policy at least every 12 months and will update it when our use of cookies, our providers, or the law changes. The "last reviewed" date above will be updated, and material changes will be reflected in our cookie banner and preference tool so you can review your choices. This is Version 1.0.
9. How to contact us
For any question about this Cookie Policy or your cookie choices, contact our Data Protection Officer at The DPO, Yoshe Clinical Operations Ltd, The Porter Building, 1 Brunel Way, Slough, England, SL1 1FQ, or by email at [email protected]. Requests are routed internally to the right person, including our EU representative and our India Grievance Officer where relevant.