
Legal
Cookie Policy
1. What this policy covers
Cookies are small files a website saves in your browser. Browser storage works in a similar way, but stays in your browser and is not sent to us with each page. This policy explains the cookies, browser storage and similar items used by our website (onestophire.com), Henry, our customer ordering portal, and the One Stop Safety Training website. Our privacy policy explains how we use personal data and your rights.
2. Your choices
- The cookie card: when you first visit our website, the cookie card asks you to accept or reject non-essential items. Analytics only starts if you accept.
- Change your mind: use "Cookie preferences" at the top of any page on our website. If you withdraw consent, the analytics tools stop.
- Your browser: you can set your browser to block or delete cookies and browser storage. If you block essential items, parts of the site, such as the enquiry basket and forms, may not work.
3. Essential items on our website
These keep the website working and secure. They are always on.
| Name or item | Purpose | How long |
|---|---|---|
| Session cookie and XSRF-TOKEN | Keeps your enquiry basket and protects forms | Up to 120 minutes of inactivity |
| cookie_consent (browser storage) | Remembers your cookie choices | Until you change it or clear your browser |
4. Preferences on our website
These remember choices you make and details you have entered.
| Name or item | Purpose | How long |
|---|---|---|
| appearance, contrast, products_per_page | Remember display and accessibility preferences. appearance and products_per_page also keep a copy in browser storage | Up to 1 year |
| product-view-mode (browser storage) | Remembers whether you view products as a grid or a list | Until you clear it |
| enquiry_contact, spec_sheet_lead (browser storage) | Fill in your details next time on the enquiry and spec sheet forms. You can clear them with the "forget" link | Until you clear them |
| osh_newsletter_popup, osh_newsletter_popup_seen (browser storage) | On the news pages, remember that you closed or used the newsletter sign-up box, so we do not show it again for 30 days after you close it, or at all once you sign up | osh_newsletter_popup until you clear it; osh_newsletter_popup_seen until you close the tab |
5. Analytics on our website (only if you accept)
| Name or item | Purpose | How long |
|---|---|---|
| Google Analytics cookies (_ga and similar) | Count visits and pages | Set by Google, up to 2 years |
| Microsoft Clarity (_clck and _clsk, and Microsoft's CLID, MUID, ANONCHK, MR and SM) | Records how you use our pages, such as clicks, scrolling and page views, so we can improve them. What you type into forms is hidden from the recordings, and the credit application page is never recorded | Set by Microsoft |
We also count page views on our own servers in a way that identifies no one: it records the page, device type, browser, operating system, referrer and campaign tags, but no IP address, no cookie and no visitor ID.
6. Content from other providers on our website
| Name or item | Purpose | How long |
|---|---|---|
| Google reCAPTCHA | Spam and abuse protection on forms. Loads when you first send a form (some older pages with a form load it when the page opens) and sends your IP address and browser details to Google | Set by Google |
| Map tiles from OpenStreetMap | Show the depot finder map. The map provider receives your IP address | Not stored by us |
| YouTube videos | Videos load only when you press play, from YouTube's privacy-enhanced domain | Set by YouTube |
7. Henry
| Name or item | Purpose | How long |
|---|---|---|
| Session cookie and XSRF-TOKEN | Essential. Keeps you signed in and protects forms. Your basket is saved against your account, not in a cookie | Up to 120 minutes of inactivity |
| Remember me | Keeps you signed in on a device if you choose that | Up to 400 days |
| YouTube videos (How to use page) | The how-to videos are embedded on the page. YouTube may set cookies and receives your IP address when the page loads | Set by YouTube |
| Google Fonts and Bunny Fonts | Load typefaces. The font providers receive your IP address | Not stored by us |
| Script and font libraries from unpkg and jsDelivr (signed-in pages) | Load code libraries used by the pages. Their providers receive your IP address | Not stored by us |
8. One Stop Safety Training website
| Name or item | Purpose | How long |
|---|---|---|
| Google Tag Manager and Google Analytics | Count visits and pages. Google receives your IP address and browser details | Set by Google |
| Meta Pixel | Measures visits and the results of our adverts on Facebook and Instagram. Meta receives your IP address, browser details and the pages you view | Set by Meta |
| LinkedIn Insight Tag | Measures visits and the results of our adverts on LinkedIn. LinkedIn receives your IP address, browser details and the pages you view | Set by LinkedIn |
| Click4Assistance live chat | Lets you chat with our team. The provider may set cookies and receives your IP address and chat messages | Set by the provider |
| Other cookies and storage | Help the website work correctly and support online bookings through Dante, our training booking management system. Online card payments are processed securely through Stripe, which loads on the website and receives your IP address | Varies by cookie |
9. Changes and contact
We review this policy when we add or remove cookies, and the date at the top shows the last change. If you have a question about cookies, contact us using the details in section 2 of our privacy policy.
Everything we hire,
in your pocket
Browse our full range online. Pick the guide you need and view it on any device.
