(UK PECR & GDPR)
Step-by-step guidance through cookie policy requirements, comprehensive template sections, automated cookie tables, and user preference controls.
Structured following UK GDPR and PECR requirements for England and Wales.
Download a professionally drafted cookie policy template for UK websites and online businesses. Also known as a cookie notice, cookie consent policy, or cookie disclosure. Covers cookie categories, consent mechanisms, third-party cookies, analytics tracking, advertising cookies, and user preference controls. Structured following UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR) requirements for England and Wales.
Whether you prefer step-by-step guidance or a traditional form, both methods produce the identical professionally-formatted cookie policy. Choose the style that suits you.
One screen at a time — less overwhelming, nothing missed.
Everything on one page — faster if you know what you need.
🔒 Your data never leaves your device — saved locally in your browser only
♻️ Unlimited use — generate cookie policies for every website and project
Required by UK PECR for any website using cookies — from simple analytics to complex advertising tracking.
What UK law requires you to tell users about cookies
Explain the different types of cookies you use — essential, functional, analytics, and advertising.
Describe why each cookie is used and what data it collects or stores.
Explain how users can manage, disable, or delete cookies from their browsers.
UK cookie law under PECR and UK GDPR requires websites to clearly explain what cookies are used, why they are used, how users can control them, and which third parties receive cookie data — non-compliance can result in ICO enforcement action.
UK PECR (Privacy and Electronic Communications Regulations) requires clear information about cookies. Combined with UK GDPR requirements for personal data, your cookie policy must cover:
Our template guides you through each requirement with clear explanations.
Cookies fall into four categories under UK GDPR — strictly necessary, functional, analytics, and advertising — each with different consent requirements, and only strictly necessary cookies can be set without prior user consent.
Only essential cookies can be set without consent — all others need user permission first.
This cookie policy template covers cookie categories and purposes, consent mechanisms, third-party cookie disclosures, analytics and tracking cookies, advertising cookies, cookie duration and expiry, user preference controls, and ICO compliance requirements.
Related documents: Websites typically also need Privacy Policy, Terms & Conditions, and Data Processing Agreement.
Common cookie policy mistakes include setting analytics cookies before consent, failing to list all third-party cookies, using pre-ticked consent boxes, not providing a genuine reject option, and copying American cookie notices that do not meet UK GDPR and PECR requirements.
Our template helps you create a policy with proper structure and clear language.
Yes. Under the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, websites must inform users about cookies and obtain consent before setting non-essential cookies.
This applies to all UK websites regardless of size.
A cookie policy is a document explaining what cookies you use and why.
Cookie consent is the mechanism (usually a banner or popup) that asks users for permission before setting non-essential cookies.
You need both to be compliant — the policy explains, the consent asks permission.
Yes, you still need to inform users about the cookies you use.
Essential cookies (strictly necessary for the website to function) don't require consent — but you must still explain what they do in your cookie policy.
Yes. Google Analytics sets cookies that track user behaviour, which requires both a cookie policy explaining what data is collected and explicit user consent before the cookies are set.
You need a cookie consent banner that allows users to accept or reject analytics cookies.
The ICO can issue fines up to £500,000 for PECR breaches (cookie rules).
For GDPR breaches related to cookie data, fines can reach £17.5 million or 4% of turnover.
Most enforcement focuses on consent mechanisms rather than the policy itself, but both are required.
You receive free lifetime updates — no subscription required, no monthly fees, ever.
We monitor ICO guidance and UK cookie law changes. When we release an updated version, it appears free in your My Templates page. No extra charges. No recurring fees.
£20 one-time. That's it. No subscriptions, no recurring fees, no "free trial" traps.
Here's what we don't do: Other sites advertise "free templates" — you spend 15 minutes filling one in, then they demand your card for a "free trial" that charges £35–£42/month when you forget to cancel. Worse, many are US-based and don't cover UK PECR requirements. (Read about the scam)
We're different: £20 upfront for the document you actually need. Build it, preview it, pay only when you're happy. Own it forever with free lifetime updates. Based on UK law. No subscription fatigue.
Stay Informed. Stay Compliant. Get key updates on UK law and compliance changes, straight to your inbox.