--- title: "Our Cookies Policy - How We Use Cookies" url: https://thepehub.co.uk/cookies/ description: "Our cookie policy is designed to provide you with complete transparency on how we use cookies and other storage technologies" --- # Cookie Policy **Last updated:** 3 September 2026 ## 1. Introduction Educe Trading Ltd, trading as The PE Hub, company number 08918344, registered at Grosvenor House, 11 St. Paul’s Square, Birmingham, England, B3 1RB. This Policy explains the cookies and similar technologies we use on our website (**thepehub.co.uk**, the “Site”) and our learning management system web application (**lms.thepehub.co.uk**, the “LMS”). It sits alongside our [Privacy Policy](https://thepehub.co.uk/privacy), which covers personal data more generally. When we refer to “Cookies” we include all non-cookie storage and tracking technologies such as local storage, pixels, tags and analytical code. ## 2. Cookie Categories, Their Purpose and Consent Under the Privacy and Electronic Communications Regulations 2003, as amended by the Data (Use and Access) Act 2025: **Strictly Necessary.** Sign-in, sessions, security, fraud prevention, fault detection, and remembering your cookie choices. This also covers our product analytics, which we use both to improve the Site and LMS and to detect breaches of our terms of service. Because the same records serve a security purpose, consent is not required and these cannot be switched off. **Appearance and Functionality.** Remembering display preferences, filters and dismissed notices. Consent is not required, but you can object. **Third-Party Embeds.** Content hosted by another organisation and displayed on our pages, such as embedded video and our booking calendar, which set their own cookies. These elements load only when you choose to open them. Where they set cookies, choosing to load one also records your consent for embedded content generally, so you are not asked again. We currently run no advertising pixels on the Site or the LMS, and we do not use cookies to build marketing profiles. Where a cookie collects personal data, the UK GDPR also applies. Our Privacy Policy sets out our lawful bases, retention periods and your rights. ## 3. Providers of Cookies and Similar Technologies [**The PE Hub**](https://thepehub.co.uk/privacy/) (Site and LMS). Sessions, authentication, preferences and your consent record. [**PostHog**](https://posthog.com/privacy) (Site and LMS). Product analytics and security monitoring, and session recording in the LMS as described in section 4. We identify accounts and visitors in this data because enforcing our terms depends on recognising patterns of activity across sessions and across both services. The same records are also used to understand how our services are used and to improve them. [**Calendly**](https://calendly.com/legal/privacy-notice) (Site). Booking meetings with us. The Calendly booking widget is an embedded frame operated by Calendly, which also loads [Google reCAPTCHA](https://policies.google.com/privacy) and [Stripe](https://stripe.com/gb/privacy) for anti-abuse and payment functionality. We have no control over Calendly’s embedded iframe. [**Vimeo**](https://vimeo.com/privacy) (Site). Video playback on our marketing pages, with Vimeo’s Do Not Track setting enabled so that it sets no cookies and stores nothing on your device. Some of our Vimeo players start automatically, so the player loads when the page opens. [**YouTube**](https://policies.google.com/privacy), operated by Google (Site). Video embedded in marketing pages, loaded only when you press play. We have embedded a link to the privacy notice of each provider in the provider’s name, which explains what it does with the data. ### Third-Party Embeds Third-party embeds appear on the Site only. None of them load when a page opens: we display a still image or a placeholder, and the provider is contacted only when you choose to load the embed. Where an embed sets cookies, that choice also records your consent. Where an embed is configured so that it sets no cookies and stores nothing on your device, it falls outside the cookie rules and is not gated. Your browser still requests it from the provider, which therefore receives your IP address. The list above says how each provider is configured. Documents on our resource pages are hosted and displayed by us. Opening one involves no third party and sets no cookies. ### The LMS No third-party content is embedded in the LMS. Its content security policy permits frames only from our own domain. No third-party video player, booking widget or tracking frame can load there. Images are served through eject.pro as described above, which sets no cookies. Lesson resources that reference video hosted elsewhere do so as ordinary hyperlinks. These set no cookies unless a user follows them and leaves the LMS. ### Technologies Outside the Cookie Rules We use [Fathom Analytics](https://usefathom.com/privacy) on the Site and the LMS to measure aggregate traffic. It sets no cookies, stores nothing on your device and creates no persistent identifier for you. We serve web fonts from [Google Fonts](https://policies.google.com/privacy) on the Site. This also sets nothing on your device, but your browser requests the files from Google, which therefore receives your IP address. Our Privacy Policy explains how we handle transfers of personal data outside the UK. We serve and optimise images on both the Site and the LMS through eject.pro, operated by [Eject Technologies Ltd](https://eject.tech/privacy/). This sets no cookies and stores nothing on your device. ## 4. Session Recording Within the LMS We may record and capture associated data on how staff accounts use the LMS. This is strictly necessary to deliver and protect the service, and covers three purposes: reproducing faults and bugs, fixing interface defects that block staff from completing tasks, and detecting breaches of our terms of service. Recording redacts pupil personal data in the browser before anything is transmitted, covering page text, images and captured interactions as well as form fields, so no pupil personal data reaches our recording provider. Screens where masking cannot be reliably applied are excluded, and we review the configuration whenever we release functionality that displays pupil data. Recordings are linked to the account that generated them, because an anonymous recording cannot be used to reproduce a specific reported fault or to establish that a specific account has breached our Terms and Conditions. For this processing we act as a **controller**, not as a processor for the Organisation, because the purposes are our own. We rely on our legitimate interests in running a secure, working service and protecting our intellectual property. Recordings are deleted after 90 days. Where a recording forms part of an open investigation into a suspected breach of our Terms, we export a copy before it expires and delete that copy once the investigation concludes. Access is restricted to named engineering and service staff. Staff who wish to object should email [info@thepehub.co.uk](mailto:info@thepehub.co.uk). We will consider objections under Article 21 UK GDPR, though because the recording is necessary to secure the LMS we may not be able to disable it for an active account. Organisations can request detail on our masking configuration to support their own DPIAs. ## 5. Processing Relating to Children Schools, academies and coaching organisations use the LMS. Not all of them add pupil records. Where they do, the pupils are primary school age, so under 13. We never use cookies or similar technologies to advertise to, target or profile anyone, on either the Site or the LMS. We do not share what these technologies collect with third parties for their own purposes. The LMS blocks embedded frames from any domain but our own. No third-party frames load there at all: no video players, no booking widgets, no tracking frames. Images are served through our image service, which sets no cookies. Some lesson resources link out to video hosted elsewhere. Following one of those links takes the user to that provider’s own site, under that provider’s terms. Organisations that would rather block this can do so at network level, as they would for any other external site. Children do not use the LMS themselves. Their data is entered and viewed by staff. The ICO’s Age Appropriate Design Code covers services children access directly, so it does not apply to the LMS. ## 6. Managing Your Preferences **Consent Banner.** On your first visit to the Site or the LMS you can accept all, reject all in a single click, or choose category by category. Rejecting is no harder than accepting. **Changing Your Mind.** Use the **Cookie settings** link in the footer of any page on the Site or in the settings menu in the LMS, or email [info@thepehub.co.uk](mailto:info@thepehub.co.uk). Objecting to appearance and functionality technologies is free, takes effect immediately, and does not restrict your access. Third-party embeds load only when you ask for them, so declining them affects nothing else on the page. If you allow embedded content by loading one, you can withdraw that at any time using the same link, and the placeholders return. **How Long Your Choices Last.** We treat your choices as current for six months and will then ask again. We will also ask again if we add a technology in a category you have not seen before, or change the purpose of one you have already decided on. **Browser Controls.** You can block or delete cookies in your browser. Blocking all of them will break the Site and the LMS, and clearing them will erase your recorded preferences. **Automated Signals.** We treat a recognised opt-out signal such as Global Privacy Control as an objection to non-essential technologies. We do not act on the withdrawn Do Not Track header. **Service Emails.** We send transactional email, such as account and service messages, through SendGrid with open and click tracking disabled. We do not record whether you opened those emails or which links you clicked. SendGrid still records whether a message was delivered, bounced or was rejected, which is necessary to run the service. **Newsletters.** We send our newsletter through Beehiiv, which does record whether an email was opened and which links were clicked. Blocking remote images in your email client prevents open tracking, and you can unsubscribe using the link in the footer of any newsletter. **Sales Emails.** Where we email you about our services, we use Pipedrive, which records whether the email was opened and which links were clicked. Blocking remote images in your email client prevents open tracking, and you can ask us to stop contacting you at any time by replying or emailing [info@thepehub.co.uk](mailto:info@thepehub.co.uk). ## 7. Changes to This Policy We update this Policy when our technologies, providers or the law change, and review it at least annually against an audit of what is actually running. Where a change is material we will tell you through the consent banner and ask for your choices again. ## 8. Contact Information and Complaints Questions: [**info@thepehub.co.uk**](mailto:info@thepehub.co.uk). If you are unhappy with our response you can complain to the Information Commissioner’s Office at [https://ico.org.uk/make-a-complaint/](https://ico.org.uk/make-a-complaint/) or on 0303 123 1113. *Educe Trading Ltd t/a The PE Hub. Registered in England and Wales, company number 08918344.*