Website/Domain:
https://www.brcgs.com (“BRCGS Website”);
https://directory.brcgs.com/ (“BRCGS Directory”);
https://brcgseducate.lgcassure.com/ (“BRCGS Educate”); and
https://www.lgcassure.com/participate (“BRCGS Participate”).
1. Who we are
This Cookie Notice applies to websites operated by BRC Trading Limited (referred to as "BRCGS", "we", "us" and "our") listed above. BRCGS is the leading globally recognised consumer protection organisation (CPO) providing supply chain assurance through standards, certification, training and industry insight.
BRCGS's registered address is: The Priestley Centre, 10 Priestley Road, Guildford GU2 7XY.
For the purposes of the UK General Data Protection Regulation ("UK GDPR"), the EU General Data Protection Regulation 2016/679 ("EU GDPR") and the Data Protection Act 2018, BRCGS is the data controller of the personal data processed through cookies on this website. BRCGS's ICO Registration Number is Z1303163. For full information about how BRCGS processes your personal data, including the categories of data we collect, the purposes for which we use it, and your full range of data rights, please see our Privacy Notices, available at: https://www.brcgs.com/privacy-notice and https://www.brcgs.com/directory/privacy-notice-directory-pro. This Cookie Notice should be read alongside our Privacy Notices.
This Cookie Notice explains what cookies are, how we use them on this website, what choices you have, and how to contact us if you have any questions.
2. What are cookies?
A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie will expire at the end of the user session, when the web browser is closed.
Cookies can be set either by us directly (these are called first-party cookies) or by third-party organisations whose services or features we have integrated into our website (these are called third-party cookies). Third-party cookies are set by a domain other than our own, and the third-party provider may have access to and use of the information collected by those cookies, including for their own purposes.
3. How we use Cookies
We use cookies on this website for the purposes set out below. Where cookies require your consent, we will ask for it via our cookie banner when you first visit this website. You can manage or withdraw your consent at any time using our cookie management tool - see Section 6 below.
We use the following categories of cookies:
3.1 Strictly necessary cookies
These cookies are essential for the website to function and cannot be switched off in our system. They are usually only set in response to actions you take, such as logging in, filling in forms, or setting your privacy preferences. You can set your browser to block or alert you about these cookies, but if you do, some parts of the website will not work as intended.
These cookies may be first-party (set by BRCGS's domain directly) or third-party (set by a provider of a core functionality tool, such as a live chat service). Where they are set by a third party, that is indicated in the schedule below.
These cookies are exempt from the requirement to obtain consent under UK PECR, as they are strictly necessary to provide a service requested by you.
3.2 Analytical/Performance cookies
These cookies allow us to count visits and understand how visitors move around our website, including which pages are most and least popular and how visitors navigate the site. The information these cookies collect is used to improve the way the website works. These cookies may be first-party (set by us directly) or third-party (set by an analytics provider acting on our behalf).
Where analytics cookies are used solely to measure website audience, the data is not used for any purpose beyond this, and the service is operated solely on BRCGS's behalf (with appropriate safeguards in place), those cookies may be deployed without prior consent but you may still opt out at any time. This is indicated in the schedule. For all other analytical cookies, your consent is required.
3.3 Functional/Preference cookies
These cookies enable enhanced functionality and personalisation, such as remembering your language or region preferences. They may be set by us (first-party) or by third-party providers whose services we have added to our website. If you do not permit these cookies, some or all of these enhanced features may not function correctly.
3.4 Marketing/Targeting cookies
These cookies are set through our website by our advertising partners (third-party providers). They may be used to build a profile of your interests and show you relevant advertisements on other websites. They do not store directly personal information but work by uniquely identifying your browser and internet device. These are third-party cookies.
4. Cookie Schedule
The full list of cookies deployed on this website, including their names, whether they are first-party or third-party, their purposes, providers, and expiry periods, is set out in the schedule below.
Schedule: Cookies Used
4.1 BRCGS Website - https://www.brcgs.com
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| ARRAffinity | First | Microsoft Azure/BRCGS | Session | Maintains session affinity by routing requests from a visitor to the same web application instance. |
| ARRAffinitySameSite | First | Microsoft Azure/BRCGS | Session | Supports secure session affinity for the BRCGS website. |
| visid_incap_3102467 | First | Imperva | 1 year | Supports website security, reliability, and protection against malicious traffic. |
| nlbi_3102467 | First | Imperva | Session | Supports load balancing and routes requests reliably through the website security service. |
| incap_ses_625_3102467 | First | Imperva | Session | Maintains a visitor session through Imperva security and load-balancing services. |
| CookieControl | First | CIVIC Cookie Control | 3 months | Stores the visitor’s cookie choices so the website can remember and apply their consent preferences. |
| ASP.NET_SessionId | First | BRCGS/Microsoft ASP.NET | Session | Maintains the user session while navigating website functionality. |
| RequestVerificationToken | First | BRCGS/Microsoft ASP.NET | Session | Helps protect website forms and requests against cross-site request forgery. |
| _GRECAPTCHA | Third | Google reCAPTCHA | 6 months | Performs risk analysis to protect login or form functionality from spam and abusive automated traffic. |
| player_clearance | Third | Vimeo | 24 hours | Helps Vimeo protect its embedded video player from automated or malicious traffic. |
| __cf_bm (Vimeo) | Third | Cloudflare/Vimeo | 30 minutes | Supports bot protection for the Vimeo player. |
| x-ms-cpim-* cookies | Third | Microsoft Entra External ID/Azure AD B2C | Session | Supports secure authentication, cross-site request protection, transaction state, and single sign-on for protected Directory access. |
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| ga | First | Google Analytics | 1 year | Distinguishes visitors and supports measurement of how the BRCGS website is used. |
| ga_XTFXC89KXF | First | Google Analytics | 1 year | Maintains analytics session information for the BRCGS Google Analytics property. |
| vuid | Third | Vimeo | 1 year observed | Assigns a Vimeo analytics identifier used to generate viewing analytics for the video owner. |
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| pricegroup | First | BRCGS | 1 year | Remembers the pricing group used by the BRCGS Store so relevant pricing can be displayed. |
| li_gc | Third | 6 months | Stores LinkedIn cookie consent preferences when LinkedIn services are loaded. | |
| lidc | Third | 24 hours | Supports routing and reliable delivery of LinkedIn services. | |
| pi_opt_in1108722 | First | Salesforce Marketing Cloud Account Engagement (Pardot) | 1 year | Records whether the visitor has opted in or out of Account Engagement tracking. |
| __cf_bm (LinkedIn) | Third | Cloudflare/LinkedIn | 30 minutes | Protects LinkedIn services from automated traffic; it is set when LinkedIn’s third-party service is loaded. |
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| visitor_id1108722 | First | Salesforce Marketing Cloud Account Engagement (Pardot) | 1 year | Stores a unique visitor identifier used to recognise and track website engagement in Account Engagement. |
| visitor_id1108722-hash | First | Salesforce Marketing Cloud Account Engagement (Pardot) | 1 year | Stores a security hash used to protect the Account Engagement visitor identifier from being forged. |
| lpv1108722 | First | Salesforce Marketing Cloud Account Engagement (Pardot) | 30 minutes | Prevents repeated reloads of the same Account Engagement asset being counted as multiple page views within a short period. |
| bcookie | Third | 1 year | Identifies a browser/device when LinkedIn services are used, supporting measurement and advertising-related activity. | |
| __Secure-YNID | Third | YouTube/Google | 6 months | Supports YouTube functionality and Google service personalisation/advertising when embedded YouTube content is loaded. |
| YSC | Third | YouTube/Google | Session | Tracks interactions with embedded YouTube videos and supports measurement of video views. |
| VISITOR_INFO1_LIVE | Third | YouTube/Google | 6 months | Supports embedded YouTube services, including measurement, personalisation, and advertising-related functions. |
| __Secure-ROLLOUT_TOKEN | Third | YouTube/Google | 6 months | Supports YouTube feature rollout and service configuration when embedded content is loaded. |
4.2 BRCGS Directory - https://directory.brcgs.com/
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| x-ms-cpim-sso:brcgsb2cprod.onmicrosoft.com_0 | Third | Microsoft Entra External ID/Azure AD B2C | Session | Supports single sign-on and authentication for protected Directory areas. |
| x-ms-cpim-csrf | Third | Microsoft Entra External ID/Azure AD B2C | Session | Protects the authentication flow against cross-site request forgery. |
| x-ms-cpim-cache|* | Third | Microsoft Entra External ID/Azure AD B2C | Session | Temporarily stores authentication transaction state during the sign-in journey. |
| x-ms-cpim-trans | Third | Microsoft Entra External ID/Azure AD B2C | Session | Maintains authentication transaction state during the sign-in journey. |
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| _ga | First | Google Analytics | 1 year | Distinguishes visitors and supports measurement of Directory usage. |
| _ga_XTFXC89KXF | First | Google Analytics | 1 year | Maintains analytics session information for the Directory Google Analytics property. |
4.3 BRCGS Participate - https://www.lgcassure.com/participate
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
| __Host-next-auth.csrf-token | First | LGC Assure/NextAuth | Session | Protects sign-in and authentication requests against cross-site request forgery. |
| __Secure-next-auth.callback-url | First | LGC Assure/NextAuth | Session | Stores the secure return URL used during the authentication process. |
| CookieControl | First | CIVIC Cookie Control | 3 months | Stores the visitor’s cookie choices so the site can remember and apply consent preferences. |
| __cf_bm | First | Cloudflare/Vimeo | 30 minutes | Supports bot protection for embedded Vimeo content. |
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| _gid | First | Google Analytics | 24 hours | Distinguishes visitors for analytics measurement. |
| _gat | First | Google Analytics | 58 seconds observed | Limits the rate at which analytics requests are sent. |
| _gat_UA-216508465-1 | First | Google Analytics | 58 seconds observed | Limits request rates for the specified Google Analytics property. |
| _ga | First | Google Analytics | 1 year | Distinguishes visitors and supports measurement of site usage. |
4.4 BRCGS Educate - https://brcgseducate.lgcassure.com/
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| acceptPolicy | First | Scheer IMC AG | 1 year | Records that the user has been informed about the use of cookies on the system. |
| ARRAzureWebFarm | First | Scheer IMC AG/Microsoft Azure | Session | Ensures requests are forwarded to the correct application server in the Microsoft Azure environment. |
| ILA_LOGOUT | First | Scheer IMC AG | 45 minutes | Records that a user has logged out of the learning platform. |
| ILAAUTH | First | Scheer IMC AG | 45 minutes | Stores user information needed to display and restore user settings within the application. |
| ILAOAUTH | First | Scheer IMC AG | 45 minutes | Authenticates and verifies the user through OAuth. |
| ilp_JSESSIONID | First | Scheer IMC AG | Session | Maintains the secure session needed to navigate the site and access protected areas. |
| ils_JSESSIONID | First | Scheer IMC AG | Session | Maintains the secure session needed to navigate the site and access protected areas. |
| oam.Flash.REDIRECT | First | Scheer IMC AG | Session | Preserves application state during an internal page redirect. |
| oam.Flash.RENDERMAP.TOKEN | First | Scheer IMC AG | Session | Preserves application state during an internal page redirect. |
| XSRF_COOKIE | First | Scheer IMC AG | 45 minutes | Protects the site against cross-site request forgery. |
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| ai_session | Third | Microsoft Application Insights/Scheer IMC AG | Session | Stores an anonymous session identifier used for application availability, reachability, and telemetry monitoring. |
| ai_user | Third | Microsoft Application Insights/Scheer IMC AG | 1 year | Stores an anonymous user identifier used for application telemetry and operational monitoring. |
| Cookie Name | First/Third Party | Provider | Expiry | Purpose |
|---|---|---|---|---|
| de.imc.ila.cache.COURSE_UPDATE | First | Scheer IMC AG | 45 minutes | Controls temporary caching of course-room data in the learning platform. |
| ILA_CURRENT_COURSE_MEDIA | First | Scheer IMC AG | 45 minutes | Remembers the most recently used course media so a user can continue where they left off. |
| ILA_USER_PROFILE_UPDATE | First | Scheer IMC AG | 45 minutes | Communicates the date of a user profile change between parts of the learning platform. |
| ILALANG | First | Scheer IMC AG | 1 year | Remembers the language selected by the user. |
5. Cookies set by our service providers (third-party cookies)
Some cookies on our website are set by third-party service providers. Where a third-party provider sets cookies on our website, they may have access to the information collected by those cookies, and in some cases may use that data for their own purposes in addition to providing their service to us. Where this is the case, we encourage you to review the relevant provider's privacy policy for further information about how they use that data.
Our current third-party cookie providers on this website include:
| Provider | Purpose | Cookies set | Privacy Policy |
|---|---|---|---|
| Microsoft | Hosting/authentication | ARRAffinity; ARRAffinitySameSite; x-ms-cpim-*; Application Insights ai_session / ai_user | https://privacy.microsoft.com/privacystatement |
| Imperva | Website security and traffic management | visid_incap_3102467; nlbi_3102467; incap_ses_625_3102467 | https://www.imperva.com/legal/privacy-statement/ |
| CIVIC | Cookie consent management | CookieControl | https://www.civicuk.com/privacy |
| Analytics and spam protection | _ga; _gid; _gat; _gat_UA-216508465-1; _ga_XTFXC89KXF; _GRECAPTCHA | https://policies.google.com/privacy | |
| Salesforce | Marketing automation and engagement tracking | visitor_id1108722; visitor_id1108722-hash; lpv1108722; pi_opt_in1108722 | https://www.salesforce.com/privacy/overview/ |
| Embedded/marketing services | bcookie; li_gc; lidc; __cf_bm | https://www.linkedin.com/legal/privacy-policy | |
| Vimeo/Cloudflare | Embedded video and player security | vuid; player_clearance; __cf_bm | https://vimeo.com/privacy |
| YouTube/Google | Embedded video | __Secure-YNID; YSC; VISITOR_INFO1_LIVE; __Secure-ROLLOUT_TOKEN | https://policies.google.com/privacy |
| Scheer IMC AG | BRCGS Educate learning platform | acceptPolicy; ARRAzureWebFarm; de.imc.ila.cache.COURSE_UPDATE; ILA_*; ILAAUTH; ILALANG; ILAOAUTH; ilp_JSESSIONID; ils_JSESSIONID; oam.*; XSRF_COOKIE | https://www.scheer-imc.com/privacy-policy/ |
6. Managing Your Cookie Preferences
You can manage or withdraw your consent to non-essential cookies at any time using our cookie management tool, accessible via the "Manage cookie settings" link in the footer of this page.
Please note that:
If you reject non-essential cookies, some features of this website may not function as intended.
Your preferences will be stored for up to 12 months, after which you will be asked to confirm your choices again.
Most browsers also allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser and version to version. You can find up-to-date guidance on managing cookies in your browser using the following links:
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera: https://help.opera.com/en/latest/security-and-privacy/
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Edge: https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy
Please note that blocking all cookies will have a negative impact upon the usability of this website. If you block cookies, you may not be able to use all features of this website.
7. How to Contact Us
If you have any questions about this Cookie Notice, please contact our Data Protection Officer at: LGC.DPO@TLT.com.
If you have any queries or concerns, we invite you to raise them with us at the above address so that we may discuss them with you for resolution.
You also have the right to lodge a complaint with a supervisory authority:
In the UK, with the Information Commissioner's Office ("ICO") by writing to: Information Commissioner's Office, Water Lane, Wilmslow, SK9 5AF, or by calling 0303 123 1113. Further information is available at: www.ico.org.uk.
In the EU Member State of your habitual residence, place of work, or place of the alleged infringement. A full list of EU data protection supervisory authorities and their contact details is available at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
8. Changes to This Cookie Notice
We may change this Cookie Notice from time to time. We encourage you to periodically review this Cookie Notice for the latest information on our cookie practices. The "last updated" date at the bottom of this notice indicates when it was most recently revised.
Last updated: October 2026