1. Home
  2. Privacy and cookies
  3. Cookies
Privacy and cookies notice

Cookies

We want our internet-based services to be easy, useful and reliable. This sometimes involves placing small amounts of information on your device, for example your computer or your mobile phone. These include small text files known as cookies. This helps us:

  • make our website secure.
  • carry out our statutory functions efficiently. 
  • make sure our website works well for you and make improvements. 
  • remember your preferences where necessary.
  • gather anonymised information about the functioning of our website and campaigns. You can find out more about our use of analytics below.
  • personalise the website to display relevant content to you.
  • improve the guidance and materials available to you. 

We are subject to the EC Privacy and Electronic Communications directive and UK GDPR which says we need to provide you with information on the cookies used on our website. Find out more about how cookies work.

We’ve explained the cookies used by the MPTS below.

Cookies set when visiting our website

Strictly necessary

Cookie Name Retention Set by Purpose
__cf_bm 30 minutes First party This cookie is used to distinguish between humans and bots. This is beneficial for the website to make valid reports on the use of their website.
__cfruid Session First party This cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators.
__cfuvid Session Third party This cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators.
__RequestVerificationToken Session First party Helps prevent Cross-Site Request Forgery (CSRF) attacks.
ASP.NET_SessionId Session First party Used by ASP.NET to store a unique identifier for your session. The session cookie is not persisted on your hard disk.
BIGipServer Session First party Used to distribute traffic to the website on several servers in order to optimise response times.
CookieConsent 1 year First party We use this to record your preferences as to whether you want to accept cookies in our Performance or Marketing categories. After a year we will ask you if you are happy to continue with your preferences or change them.
shell#lang Session First party Stores the context language of the current site. Used by Sitecore.
MPTSwebsite#lang Session First party Used to support Welsh language on our site.
cookies_policy 1 year First party We use this to record your preferences as to whether you want to accept cookies in our Performance or Marketing categories. After a year we will ask you if you are happy to continue with your preferences or change them.
1.gif Session Third party Used to count the number of sessions to the website, necessary for optimizing CMP product delivery.

Performance

Cookie Name Retention Set by Purpose
_ga 2 years First party Used by Google Analytics. Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_ga_# 2 years First party Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.
_gid 1 day First party Google Analytics registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_gat 1 day First party Used by Google Analytics to throttle request rate to manage server requests.
td Session First party Google tag manager. Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator.
_hjSession_# 1 day First party Hotjar collects statistics on the visitor's visits to the website, such as the number of visits, average time spent on the website and what pages have been read.
_hjSessionUser_# 1 year First party Hotjar collects statistics on the visitor's visits to the website, such as the number of visits, average time spent on the website and what pages have been read.
_hjTLDTest Session First party Hotjar registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator.
hjActiveViewportIds Persistent First party Hotjar cookie that contains an ID string on the current session. This contains non-personal information on what subpages the visitor enters – this information is used to optimise the visitor's experience.
hjViewportId Session First party Hotjar saves the user's screen size to adjust the size of images on the website.
#-# Session Third party Used to track user's interaction with embedded content.
Secure-ROLLOUT_TOKEN 180 days Third party Unclassified.
iU5q-!O9@$ Session  Third party Registers a unique ID to keep statistics of what videos from YouTube the user has seen.
ytidb::LAST_RESULT_ENTRY_KEY Session Third party Used by YouTube to track user’s interaction with embedded content.
LogsDatabaseV2 Persistent Third party Used to track user's interaction with embedded content.
NID 6 months Third party Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.
remote_sid Session Third party Necessary for the implementation and functionality of YouTube video-content on the website.
TESTCOOKIESENABLED 1 day Third party Used by YouTube to track user’s interaction with embedded content.
VISITOR_PRIVACY_METADATA
VISITOR_INFO1_LIVE
180 days Third party Used by YouTube to Store the user's cookie consent state for the current domain.
vuid 2 years Third party Collects data on the user's visits to the website, such as which pages have been read.
YSC Session Third party Registers a unique ID to keep statistics of what videos from YouTube the user has seen.
YtIdbMeta#databases Persistent Third party Used by YouTube to track user’s interaction with embedded content.
yt-remote-cast-available
yt-remote-cast-installed
yt-remote-fast-check-period
yt-remote-session-app
yt-remote-session-name
Session Third party Stores the user's video player preferences using embedded YouTube video.
yt-remote-connected-devices
yt-remote-device-id
Persistent Third party Stores the user's video player preferences using embedded YouTube video.

Marketing

Cookie Name Retention Set by Purpose
ads/ga-audiences Session Third party Used by Google Ads for to store information for remarketing purposes.
__Secure-YEC Session Third party Stores the user's video player preferences using embedded YouTube video
__Secure-YNID 180 days Third party Unclassified

Cookies set when visiting GMC Connect and GMC Online text

Strictly Necessary

Cookie Name Retention Set by Purpose
..AspNetCore.Cookies Session First party Used to identify and maintain the B2C session.
ef270529b84d369ff5b39af64d5d1df8 15 minutes First party Keeps track of when the session is due to end to issue a redirect on mobile device if user comes back in after cookie expiry.
GMCSignInUrlRedirect
ResolveGMCSignInUrlRedirect
2 hours First party Stores URL to redirect to after B2C sign in. Used to identify if we need to redirect the user after they’ve signed in, for example following a password reset.
JSESSIONID Session First party Used for session management.
OpenIdConnect.nonce. 15 minutes First party Used to verify the B2C session and protect against replay attacks.
_sn_ecustomer_enu Session First party Used to identify and maintain the users Siebel GMC Online session.
_sn_gmcconnect_enu Session First party Used to identify and maintain the users Siebel GMC Connect session.
x-ms-cpim-admin
x-ms-cpim-cache:{id}_n
x-ms-cpim-csrf
x-ms-cpim-ctx
x-ms-cpim-dc
x-ms-cpim-rc
x-ms-cpim-rp
x-ms-cpim-slice
x-ms-cpim-sso:{Id}
x-ms-cpim-trans
Session First party These cookies are set by Azure Active Directory B2C (Azure AD B2C). Azure AD B2C is an identity management service that enables our user sign up, sign in and profile management. We use this platform for our GMC Online and GMC Connect applications. More information about these Cookies can be found at Cookie definitions - Azure AD B2C.
_sn_gmcconnect_enu Session First party Used to identify and maintain the users Siebel GMC Connect session.
ai_user 1 year First party Used by Microsoft PowerBI to collect statistical usage and telemetry information. The cookie stores a unique identifier to recognise users on returning visits over time.
ai_session 1 day First party Preserves user states across page requests.

Performance

Cookie Name Retention Set by Purpose
_gid 1 day First party Google Analytics registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_gat 1 day First party Used by Google Analytics to throttle request rate to manage server requests.
_ga 2 years First party Used by Google Analytics. Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_hjSession_# 1 day First party Hotjar collects statistics on the visitor's visits to the website, such as the number of visits, average time spent on the website and what pages have been read.
_hjSessionUser_# 1 year First party Hotjar collects statistics on the visitor's visits to the website, such as the number of visits, average time spent on the website and what pages have been read.
_hjTLDTest Session First party Hotjar registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator.
hjActiveViewportIds Persistent First party Hotjar cookie that contains an ID string on the current session. This contains non-personal information on what subpages the visitor enters – this information is used to optimise the visitor's experience.
hjViewportId Session First party Hotjar saves the user's screen size to adjust the size of images on the website.

Cookies set when visiting Our recruitment website

Strictly Necessary

Cookie Name Retention Set by Purpose
sessionid2965 Session First party Allows user to select job alerts by email.
lastaccesstime2965 Session First party Captures date and time of visit.
Ccp_user2965 Session First party Captures candidate userid - only set if user registers to use the site and allows user to apply for jobs.
Ccp_name2965 Session First party Captures candidate name - only set if user registers to use the site and allows user to apply for jobs.
Wedeputy_reg_email_3552 Session First party Captures candidate email address - only set if user registers to use the site and allows user to apply for jobs.

Performance

Cookie Name Retention Set by Purpose
_ga 2 years First party Used by Google Analytics. Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_ga_# 2 years First party Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.
_gid 1 day First party Google Analytics registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_gat 1 day First party Used by Google Analytics to throttle request rate to manage server requests.

Social media cookies

We use several social media sites and applications to raise awareness of our work and promote good medical practice.

Please note that your use of these sites will be subject to each one’s terms and conditions. Please read their privacy and cookie notices carefully and check your personal settings where appropriate to make sure you're happy with how your information will be used by the social media site.

We don’t actively collect data you submit to any third-party websites but may collect aggregated information (that doesn’t identify you) to help us monitor access to our content.

Our website analytics and data

Google analytics

Google Analytics cookies are classified as performance cookies. They are not strictly necessary for the functioning of the GMC’s website. If you consent to Google Analytics cookies via our cookie banner, we'll use Google Analytics to monitor site usage. 

As part of Google Analytics, we have enabled Google Advertising Features. These features allow us to view general aggregated demographic information about our users, such as age group, gender, interest categories, etc.

We also use cookies for remarketing, which means we may display content about our regulatory functions that we think might be of interest to you when you visit other websites. Third party vendors, including Google, may use cookies to serve advertisements based on your prior visits to our websites.

Hotjar

Hotjar cookies are classified as performance cookies, so we need your consent via the Cookie banner to be able to use these on your device when visiting our website. We use Hotjar to better understand our users’ needs and to optimise their service and experience. Hotjar is a technology service that helps us better understand our users experience (e.g., how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc). This helps us build and maintain our service with user feedback.

Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices, in particular, a device's IP address (captured and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and preferred language used to display our website. Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor the GMC will ever use this information to identify individual users or to match it with further data on an individual user. For further details, see Hotjar’s privacy policy.

Session variables

Some of our microsites use session variables to record your responses. Session variables are different to cookies because they are stored on the server relative to the session, rather than your device. Session variables are semi-permanent data files that exist only while your session with an application is active. Session variables are specific to each visitor and are deleted when you close the browser.

We monitor the introduction of new cookies on our websites and update privacy cookie information where appropriate.