Cookie Consent
Definition
The process of informing visitors about cookies and obtaining their permission before storing non-essential cookies on their devices.
What is Cookie Consent?
Cookie consent is the process of informing website visitors about the cookies you use and obtaining their permission before placing non-essential cookies on their devices. This typically appears as a banner or popup when visitors first arrive.
Under GDPR and UK privacy law, consent must be freely given, informed, and specific.
Why Cookie Consent Matters
Legal Requirement
EU and UK law requires consent before setting non-essential cookies. Fines for non-compliance can be substantial.
User Privacy
Visitors have the right to control tracking of their browsing behaviour.
Trust Building
Transparent cookie practices demonstrate respect for visitor privacy.
Platform Requirements
Advertising platforms increasingly require compliant consent mechanisms for their tools to function properly.
Types of Cookies
Essential Cookies (No Consent Needed)
Required for basic website function:
- Shopping cart functionality
- User authentication
- Security features
- Load balancing
Non-Essential Cookies (Consent Required)
All other cookies need consent:
- Analytics (Google Analytics)
- Advertising and retargeting
- Social media tracking
- Personalisation
- Third-party widgets
What Valid Consent Requires
Freely Given
Users must have a genuine choice. No pre-ticked boxes. Rejecting cookies shouldn't be harder than accepting.
Informed
Clear explanation of what cookies do and who sets them.
Specific
Separate consent for different purposes. Don't bundle analytics with advertising.
Unambiguous
Active opt-in required. Continued browsing doesn't equal consent.
Withdrawable
Easy way to change cookie preferences at any time.
Cookie Banner Requirements
Must Include
- Clear explanation of cookie usage
- Option to accept all
- Option to reject non-essential
- Link to full cookie policy
- Way to customise preferences
Should Avoid
- Pre-selected options
- Dark patterns (making reject harder)
- Hiding reject option
- Cookie walls (blocking content until consent)
Implementation Options
Consent Management Platforms
- Cookiebot
- OneTrust
- CookieYes
- Termly
These tools scan your site, categorise cookies, and provide compliant consent mechanisms.
CMS Plugins
WordPress, Shopify, and other platforms have cookie consent plugins with varying quality and compliance levels.
After Consent
Consent Given
Set cookies and load tracking scripts as specified.
Consent Denied
Don't set non-essential cookies. Your site should work without them.
Record Keeping
Store records of consent (what was consented to and when) for compliance evidence.