Website Cookie Policy

This document is a website cookie policy. It can be used by websites which are based in the United Kingdom.

It is important for a website to have a cookie policy because the Privacy and Electronic Communications Regulations 2003 (which are retained in the United Kingdom laws following 1 January 2021) require that any website which uses cookies must:

• inform the user that the website uses cookies; and
• explain what the cookies are doing and why.

These rules also apply to similar technologies which perform the same function as cookies, such as web beacons, action tags, local shared objects, flash cookies, single-pixel gifs. The policy can be used to cover similar technologies.

Under most circumstances, a website will require a users consent in order to use cookies. Consent must be obtained in a clear format (and may not be obtained via this policy document). The standard of consent is defined under the retained EU General Data Protection Regulation 2016/679 (UK GDPR). The standard for consent is a high standard, stipulating that it must be given freely. The consent must be unambiguous and involve a clear affirmative action (an opt-in). A website must therefore make use of some form of consent form/checkbox system in order to obtain consent.

Consent is not required for the use of cookies where:

• the cookies are placed or information within them is accessed for the sole purpose of carrying out an electronic communication via an electronic network; or
• where the storage or access to the cookies is necessary for the provision of an information society service requested by the user (for example, the provision of a checkout service where the user wishes to purchase goods from the website).

Where cookies are used to obtain personal information in relation to website users, it is essential that a privacy policy is also held by the website.

Where relevant and appropriate, a website may also need to hold documents setting out its terms and conditions of use, terms and conditions of sale, and its policy regarding acceptable use of the website.

How to use the document

The document should be filled out with the relevant factual information. Once completed, the policy should be placed in the website so that it easily accessible and available for users to read. It is sensible to place a link to the policy as a footer so that it is available from every page on the website.

Care should also be taken to ensure that a link is provided to the cookie policy in the website's privacy policy and within any terms and conditions of use.

Additionally, the website must put in place a proper process for obtaining consent, as explained above.

The website should ensure that the cookie policy is kept up to date and must revise this regularly, especially where the website changes the manner in which it uses cookies.

Relevant law

• The retained EU General Data Protection Regulation 2016/679 (UK GDPR)
• The retained Privacy and Electronic Communications (EC Directive) Regulations 2003
• The Data Protection Act 2018
• Further information on cookies can be found on the Information Commissioner's Office website.

Help from a lawyer

You can choose to consult a lawyer if you need help.

The lawyer can answer your questions or help you through the process. You will be offered this option when you complete the document.

How to modify the template

You fill out a form. The document is created before your eyes as you respond to the questions.

At the end, you receive it in Word and PDF formats. You can modify it and reuse it.