Cookie Policy and Guidance Notes

To comply with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR (General Data Protection Regulation) which regulate how personal data is collected and used, UK websites are required to have a Cookie Policy. These regulations aim to protect user privacy and ensure transparency. Websites must inform users of what cookies are used; obtain prior and explicit consent (not implied); provide granular control allowing users to select categories; and enable users to change consent.

How will the Cookie Policy Help?

The Cookie Policy acts as the legal and user-facing document on the website providing details of definitions (cookies and personal data); the types of cookies (strictly necessary, analytics, functionality, targeting etc.); the purpose and consent of each cookie; consent mechanisms and user control options; and instructions for changing browser setting. It includes template text for cookie consent prompts such as banners and pop-ups. The policy ensures compliance with the inform and consent legal requirements.

How will the Cookie Law Guidance Notes Help?

The Cookie Law Guidance Notes helps the website owner or operator make informed decisions when customising the Cookie Policy and the consent interface. It provides internal instructions and explanations covering the legal background and purpose of the cookie regulations; why browser settings and implied consent are insufficient; the steps required for a cookie audit - what cookies are used, what data they collect, how long they persist; how to design consent mechanisms - banner, pop-up or feature based; and best practice for transparency, user education and interface design.

What Other Related Documents are available within the Business Subscription?

In addition to a Cookie Policy businesses operating with websites (whether transactional, social media, information based or provision of online services) will require a number of other documents ranging from terms and conditions, terms of use, privacy policy and possibly website disclaimers. Each online activity will have a different set of criteria to meet their business activities. Business includes a wide selection of Website Terms & Conditions covering multiple online activities: Choice of Privacy Policies to best match the data collected and recorded by the website: And additional protection with a range of Website Disclaimers and Other Notices.

Please click on the links below to download the Cookie Policy and Guidance Notes:

Cookie Policy and Guidance Notes is part of Business . Just £38.50 + VAT provides unlimited downloads from Business for 1 year.

Frequently Asked Questions

Are analytics cookies exempt from consent now? +

Only in a narrow way. From 5 February 2026 the Data (Use and Access) Act 2025 exempted some low risk purposes from consent, including statistical or analytics cookies used solely to improve your own service. The catch is that the exemption falls away if the same analytics also feed advertising or are shared with third parties for their own purposes, which covers many common set-ups. If in doubt, keep analytics behind the consent banner.

What is the difference between the cookie policy and the guidance notes? +

The Cookie Policy is the public document on your site that lists the cookies you use, what they do, whether third parties set them and how visitors change their choices. The Guidance Notes are for you, not your users: they explain the law, why implied consent and browser settings are not enough, how to run a cookie audit and how to design the consent banner. You use the notes to complete and tailor the policy.

Is implied consent, like continuing to browse, enough for cookies? +

No. Continuing to browse, a pre ticked box or a notice saying you accept cookies by using the site do not amount to valid consent under PECR and the UK GDPR. Consent must be a positive action such as clicking accept, and users must be able to refuse non essential cookies just as easily as they accept them. Relying on implied consent is one of the most common cookie failures the ICO highlights.

What happens if I get cookie consent wrong? +

It is now a bigger risk than it used to be. The Data (Use and Access) Act 2025 raised the maximum PECR penalty to match the UK GDPR, up to £17.5 million or 4 percent of worldwide annual turnover, whichever is higher, replacing the old £500,000 cap. The ICO has also been reviewing cookie practices on the most visited UK websites. Getting consent right, and keeping a record of it, matters more than before.

Business Buy Only £38.50 + VAT!
Unlimited Downloads for One Year
No Auto-Renewal

Select Website Terms & Conditions

All Privacy & Cookie Policies