United Kingdom Cookie Policy Clause Library
Created:
Explore practical clause examples for UK cookie policies and understand how they can support clearer compliance wording. For more guidance, visit the AI Generated British Cookie Policy category page.
Clause Purpose | Detail Level | Relevant Website Type | Example Clause Wording | Drafting Caution |
|---|---|---|---|---|
What Are Cookies | ||||
Explains cookies and similar technologies in plain English. | Basic | All websites | Cookies are small text files placed on your device when you visit our website. We also use similar technologies, such as pixels and local storage, where described in this policy. | Do not limit the explanation to browser cookies if pixels, SDKs or local storage are used. |
Legal Basis For Cookies | ||||
States that UK cookie rules require clear information and consent for most non-essential cookies. | Detailed | Websites using non-essential cookies | We use non-essential cookies only where you have given consent, unless another exemption applies under applicable UK cookie rules. | Avoid suggesting consent is optional if cookies are already set before the user chooses. |
Strictly Necessary Cookies | ||||
Identifies cookies needed for the website to function or provide requested services. | Intermediate | All websites | Strictly necessary cookies are required to operate our website, keep it secure and provide services you request, such as logging in or using a shopping basket. | Do not include analytics, advertising or preference cookies in this category unless genuinely essential. |
Cookie Consent | ||||
Explains when and how users are asked to consent to non-essential cookies. | Detailed | Websites using non-essential cookies | When you first visit our website, we ask you to choose whether to accept or reject non-essential cookies. You can change your choice at any time using our cookie settings. | Consent should not rely on pre-ticked boxes, inactivity or continuing to browse. |
Changing Cookie Preferences | ||||
Tells users how to withdraw consent or update cookie choices. | Intermediate | Websites using non-essential cookies | You can change or withdraw your cookie consent at any time by selecting the cookie settings link available on our website. | Provide a real, persistent route to settings do not describe a preference centre that does not exist. |
Cookie Categories | ||||
Groups cookies by purpose to help users make informed choices. | Intermediate | Websites using non-essential cookies | We group cookies as strictly necessary, preferences, analytics, advertising and social media cookies, depending on their purpose. | Categories must match actual technologies used, not a generic template list. |
Analytics Cookies | ||||
Explains cookies used to measure website traffic and performance. | Intermediate | Websites using non-essential cookies | Analytics cookies help us understand how visitors use our website, such as which pages are visited and whether users encounter errors. | In the UK, analytics cookies generally require consent unless a narrow exemption applies. |
Google Analytics Cookies | ||||
Discloses Google Analytics measurement cookies and related data handling. | Detailed | Websites using third-party services | We use Google Analytics to collect information about how visitors use our website. Google may process usage data according to its own terms and privacy documentation. | Name the service and ensure consent mode or blocking is configured before consent where required. |
Advertising Cookies | ||||
Explains cookies used for targeted advertising, frequency capping and campaign measurement. | Detailed | Websites using non-essential cookies, Websites using third-party services | Advertising cookies may be used to show relevant adverts, limit how often you see an advert and measure advertising performance. | Do not set advertising cookies before consent disclose third-party ad networks clearly. |
Social Media Cookies | ||||
Explains cookies set by social sharing tools, feeds or embedded social content. | Intermediate | Websites using third-party services | Social media cookies may be set when you interact with sharing buttons, embedded feeds or content from social media platforms. | Embedded social content can set cookies even if the user does not click a share button. |
Preference Cookies | ||||
Explains cookies that remember user choices such as language, region or display settings. | Basic | Depends on website features | Preference cookies remember choices you make, such as language or region, so we can provide a more personalised experience. | Assess whether each preference cookie is truly requested by the user or needs consent. |
Functionality Cookies | ||||
Describes cookies supporting optional website features and enhanced functionality. | Intermediate | Depends on website features | Functionality cookies enable enhanced features, such as remembering form entries or enabling optional support tools. | Do not treat convenience features as strictly necessary without a clear reason. |
Performance Cookies | ||||
Explains cookies used to monitor performance, reliability and errors. | Intermediate | Depends on website features | Performance cookies help us measure page loading, detect errors and improve how our website works. | Performance monitoring may still require consent if it stores or accesses information on the user's device. |
Session And Persistent Cookies | ||||
Explains whether cookies expire at browser close or remain for a defined period. | Basic | All websites | Session cookies are deleted when you close your browser. Persistent cookies remain on your device until they expire or are deleted. | Do not omit actual retention periods for persistent cookies in the cookie table. |
First-Party Cookies | ||||
Explains cookies set directly by the website operator. | Basic | All websites | First-party cookies are set by our website and are used for purposes such as security, preferences and website operation. | First-party status does not remove the need for consent if the cookie is non-essential. |
Third-Party Cookies | ||||
Explains cookies set by external providers through the website. | Detailed | Websites using third-party services | Some cookies are set by third parties that provide services on our website, such as analytics, video, advertising, maps or payment services. | Name the third parties and link to their privacy or cookie information where possible. |
Cookie Table | ||||
Lists individual cookies with name, provider, purpose, duration and category. | Detailed | All websites | The table below explains the cookies we use, who provides them, why they are used and how long they remain on your device. | Keep the table accurate outdated cookie inventories create compliance and trust risks. |
Cookie Duration | ||||
Explains how long cookies remain on a user's device. | Intermediate | All websites | Cookies may last only for your browsing session or for the period shown in our cookie table. | Avoid vague wording such as "for as long as necessary" where exact cookie lifetimes are known. |
Similar Technologies | ||||
Covers pixels, tags, local storage, SDKs and device identifiers. | Detailed | Depends on website features | References to cookies include similar technologies that store or access information on your device, such as pixels, tags, local storage and SDKs. | UK cookie rules apply to storing or accessing device information, not only traditional cookies. |
Browser Cookie Controls | ||||
Tells users they can manage cookies through browser settings. | Basic | All websites | You can usually block or delete cookies through your browser settings, but some parts of our website may not work properly if you do so. | Browser controls are not a substitute for obtaining consent for non-essential cookies. |
Cookie Banner Explanation | ||||
Provides concise first-layer information before consent is requested. | Intermediate | Websites using non-essential cookies | We use essential cookies to make this site work. With your consent, we also use analytics and marketing cookies. You can accept, reject or manage your choices. | A banner should not nudge users unfairly by making reject options harder to find. |
Reject Non-Essential Cookies | ||||
Explains that users can refuse non-essential cookies without losing core access. | Intermediate | Websites using non-essential cookies | You may reject non-essential cookies. Essential cookies will still be used where needed to provide the website. | If an accept all button is offered, a reject all option should be comparably available for non-essential cookies. |
Granular Cookie Choices | ||||
Allows users to consent by cookie category or purpose. | Detailed | Websites using non-essential cookies | You can choose which categories of non-essential cookies you allow by using our cookie settings panel. | Bundled consent for analytics, marketing and social media cookies may not be sufficiently specific. |
Consent Records | ||||
Explains that the site may store a consent cookie or record to remember choices. | Intermediate | Websites using non-essential cookies | We may store a cookie or consent record to remember your cookie choices and avoid asking you again unnecessarily. | A consent-management cookie should be limited to recording preferences and not repurposed for tracking. |
Embedded Video Cookies | ||||
Discloses cookies set by embedded video players such as YouTube or Vimeo. | Detailed | Websites using third-party services | Pages with embedded videos may allow the video provider to set cookies or similar technologies when the video loads or is played. | Consider privacy-enhanced embedding and blocking video cookies until consent is given. |
Map And Location Service Cookies | ||||
Discloses cookies from embedded maps and location widgets. | Intermediate | Websites using third-party services | Embedded maps may set cookies to display map content, remember preferences and support the map provider's services. | Do not ignore map embeds they can involve third-party cookies and data transfers. |
Payment Service Cookies | ||||
Explains cookies used by payment providers for checkout, fraud prevention and security. | Detailed | Depends on website features, Websites using third-party services | Our payment providers may use cookies or similar technologies to process payments, detect fraud and secure transactions. | Some payment cookies may be necessary, but marketing or analytics cookies from payment providers need separate assessment. |
Shopping Basket Cookies | ||||
Explains cookies needed to remember basket contents and checkout progress. | Basic | Depends on website features | Shopping basket cookies remember items you add to your basket and support the checkout process. | Limit necessary classification to basket and checkout functions requested by the user. |
Login And Authentication Cookies | ||||
Explains cookies used to keep users signed in and protect accounts. | Basic | Depends on website features | Authentication cookies help verify your identity, keep you signed in and protect your account while you use restricted areas. | Avoid excessive retention for authentication cookies, especially on shared devices. |
Security Cookies | ||||
Explains cookies used for fraud prevention, load balancing and site security. | Intermediate | All websites | Security cookies help protect our website from misuse, detect suspicious activity and maintain reliable service. | Only classify cookies as security cookies if the security purpose is genuine and documented. |
Load Balancing Cookies | ||||
Explains cookies used to route users to the correct server for site stability. | Basic | Depends on website features | Load balancing cookies help distribute website traffic and keep the website available and responsive. | Check whether the load-balancing provider also sets non-essential analytics or tracking cookies. |
Live Chat Cookies | ||||
Discloses cookies used by chat widgets for support conversations and visitor identification. | Detailed | Websites using third-party services | If we provide live chat, the chat provider may use cookies to maintain the chat session and remember previous conversations. | Chat widgets may set cookies on page load configure them according to consent requirements. |
Support Tool Cookies | ||||
Explains cookies from helpdesk, feedback or ticketing widgets. | Intermediate | Websites using third-party services | Support tools may use cookies to identify your support session, remember messages and improve helpdesk functionality. | Distinguish essential support session cookies from optional analytics within the support tool. |
A/B Testing Cookies | ||||
Explains cookies used to test page versions, layouts or features. | Intermediate | Depends on website features | A/B testing cookies help us show different page versions and measure which version performs better. | A/B testing is usually not strictly necessary and should normally be consent-controlled. |
Personalisation Cookies | ||||
Explains cookies used to tailor content, recommendations or user experience. | Intermediate | Depends on website features | Personalisation cookies help us tailor content, recommendations or settings based on your previous interactions. | If personalisation involves profiling, align the cookie policy with the privacy notice. |
Retargeting Pixels | ||||
Discloses pixels used to show adverts to previous website visitors. | Detailed | Websites using third-party services, Websites using non-essential cookies | Retargeting pixels may help us show adverts to people who have previously visited our website or interacted with our services. | Retargeting normally requires consent and clear third-party disclosure before pixels fire. |
Meta Pixel Cookies | ||||
Discloses Meta Pixel use for advertising measurement and targeting. | Detailed | Websites using third-party services, Websites using non-essential cookies | We may use Meta Pixel to measure adverts and understand actions taken on our website after users view or click Meta ads. | Do not fire Meta Pixel before consent disclose Meta as a third-party recipient where applicable. |
Google Ads Cookies | ||||
Explains Google advertising cookies for ad delivery, conversion tracking and remarketing. | Detailed | Websites using third-party services, Websites using non-essential cookies | Google Ads cookies may be used to measure ad conversions, support remarketing and help show relevant advertising. | Check Google consent settings and ensure advertising cookies are blocked unless consent is given. |
Affiliate Tracking Cookies | ||||
Explains cookies used to attribute sales or referrals to affiliate partners. | Intermediate | Depends on website features, Websites using third-party services | Affiliate cookies help identify whether a purchase or enquiry followed a link from an affiliate partner. | Affiliate tracking is not essential to the user and normally needs consent. |
Consent Management Cookies | ||||
Explains cookies used by a CMP to store cookie choices. | Intermediate | Websites using non-essential cookies | Our consent management tool uses cookies to record your choices and ensure non-essential cookies match your preferences. | The CMP must technically enforce choices a policy statement alone is insufficient. |
Device Identifiers | ||||
Covers identifiers stored or accessed on devices for tracking or functionality. | Detailed | Depends on website features | We may use device identifiers where our services need to recognise a browser, device or app installation. | PECR can apply even if the identifier is not called a cookie. |
Local Storage | ||||
Explains browser storage used to save settings, tokens or app data. | Intermediate | Depends on website features | We may use local storage to save information in your browser, such as preferences or session information. | Local storage can fall within cookie rules where it stores or accesses device information. |
Web Beacons And Pixels | ||||
Explains invisible tracking technologies used to measure views, clicks or conversions. | Detailed | Websites using non-essential cookies, Websites using third-party services | Pixels and web beacons are small code snippets that help measure whether content or adverts are viewed or interacted with. | Pixels used for analytics or marketing should be consent-controlled like cookies. |
Email Tracking Pixels | ||||
Discloses tracking in marketing emails where relevant to website account or campaigns. | Detailed | Depends on website features | Our emails may contain pixels that tell us whether an email was opened or links were clicked, where permitted by your choices. | Email tracking should align with marketing consent and privacy notice disclosures. |
Children's Use Of Cookies | ||||
Explains special caution where cookies affect children or child users. | Detailed | Depends on website features | If our website is likely to be accessed by children, we consider children's privacy when deciding which cookies and tracking technologies to use. | Avoid profiling or behavioural advertising to children without specialist assessment under the Children's Code. |
Cookies And Personal Data | ||||
Explains that cookie data may be personal data when it identifies or relates to a user. | Detailed | All websites | Information collected through cookies may be personal data where it identifies you or can be linked to you. | Cookie disclosures should be consistent with the website privacy notice and lawful basis explanations. |
International Transfers By Providers | ||||
Flags that third-party cookie providers may process data outside the UK. | Detailed | Websites using third-party services | Some third-party providers may process cookie-related data outside the UK. Where required, we rely on appropriate transfer safeguards. | Do not promise UK-only processing if providers route data internationally. |
Changes To This Cookie Policy | ||||
Explains that cookie information may change when website tools or providers change. | Basic | All websites | We may update this cookie policy when we change the cookies, providers or technologies used on our website. | Update the policy after adding new plugins, analytics tools or advertising tags. |
Cookie Questions Contact | ||||
Gives users a route for questions about cookies and privacy rights. | Basic | All websites | If you have questions about our use of cookies, please contact us using the details in our privacy notice. | Ensure contact details match the privacy notice and are monitored. |
Do Not Track Signals | ||||
Explains whether the website responds to browser do-not-track signals. | Intermediate | Depends on website features | Our website does not currently respond to browser do-not-track signals, but you can manage cookies using our cookie settings and your browser controls. | Do not claim to honour signals unless the technical implementation has been verified. |
Cookie Walls | ||||
Explains any access restriction linked to accepting cookies or paid alternatives. | Detailed | Depends on website features | We do not make access to our core website conditional on accepting non-essential cookies unless we clearly explain any lawful alternative offered. | Cookie walls and pay-or-consent models need careful UK assessment of freely given consent. |
Mobile App SDKs | ||||
Covers app software development kits that access device information. | Detailed | Depends on website features | If you use our app, SDKs may access device information for functions such as analytics, crash reporting or advertising, depending on your choices. | Do not use a website-only cookie policy for apps without addressing SDKs and device permissions. |
Crash Reporting Technologies | ||||
Explains technologies used to diagnose crashes and technical errors. | Intermediate | Depends on website features | Crash reporting technologies help us identify technical faults, diagnose errors and improve reliability. | Check whether crash tools collect identifiers, URLs, user IDs or device data that require disclosure and consent assessment. |
Fraud Prevention Cookies | ||||
Explains cookies used to detect bots, abuse, payment fraud or account misuse. | Intermediate | Depends on website features | Fraud prevention cookies help us detect automated misuse, protect accounts and reduce fraudulent transactions. | Fraud prevention may be necessary, but avoid combining it with advertising or analytics purposes. |
CAPTCHA And Bot Detection Cookies | ||||
Discloses cookies used by CAPTCHA or bot detection services. | Detailed | Websites using third-party services | CAPTCHA services may use cookies or device information to distinguish human users from automated bots and protect our forms. | CAPTCHA providers may process data for their own purposes disclose provider terms and privacy links. |
CDN And Security Provider Cookies | ||||
Explains cookies from CDN, firewall or security services. | Intermediate | Websites using third-party services | Our CDN or security provider may set cookies to deliver content efficiently, identify trusted traffic and protect the website. | Confirm whether provider cookies are purely security-related or also used for analytics. |
Embedded Third-Party Content | ||||
Warns that embedded posts, widgets or media may set third-party cookies. | Intermediate | Websites using third-party services | Embedded third-party content may behave as if you visited the third-party website and may set its own cookies. | Do not load embeds that set non-essential cookies until consent is obtained. |
Cookie Audit Statement | ||||
States that the website reviews cookies to keep disclosures accurate. | Intermediate | All websites | We review the cookies and similar technologies used on our website periodically and update this policy where needed. | Do not state audits are performed on a fixed schedule unless the organisation follows it. |
Privacy Notice Link | ||||
Links cookie information to broader personal data processing disclosures. | Basic | All websites | For more information about how we use personal data, please read our privacy notice. | The cookie policy and privacy notice should not contradict each other on providers, purposes or retention. |
Data Protection Rights | ||||
Refers users to rights that may apply to personal data collected through cookies. | Intermediate | All websites | Where cookie information is personal data, you may have rights under data protection law, as explained in our privacy notice. | Avoid listing rights incompletely unless the full privacy notice provides detailed rights information. |
Sensitive Inferences From Cookies | ||||
Warns where tracking may reveal sensitive interests or health, religion or political inferences. | Detailed | Depends on website features | We do not intentionally use cookies to infer special category information unless this is clearly explained and lawful safeguards apply. | Health, political, religious or similar sites should assess whether tracking creates sensitive data risks. |
Retention Limits For Cookie Data | ||||
Explains that cookie-related personal data should not be kept longer than needed. | Intermediate | All websites | We retain cookie-related personal data only for as long as needed for the purposes explained in this policy and our privacy notice. | Distinguish cookie expiry from server-side retention of analytics or advertising records. |
Automated Decisions Using Cookie Data | ||||
Discloses any significant automated decisions or profiling using cookie data. | Detailed | Depends on website features | We do not use cookie data to make decisions that produce legal or similarly significant effects about you without appropriate safeguards. | If cookie-based profiling affects pricing, access or eligibility, obtain specialist advice. |
ICO Complaint Information | ||||
Directs users to the UK Information Commissioner's Office for complaints. | Basic | All websites | You can raise concerns with the Information Commissioner's Office if you are unhappy with how we use cookies or personal data. | This is usually better placed in the privacy notice, but may be cross-referenced for cookie-related personal data. |
Server Logs And Cookies | ||||
Distinguishes cookies from server logs while explaining related website usage data. | Intermediate | All websites | Our servers may also record technical information, such as IP address and browser type, separately from cookies. | Do not treat server logs as cookies, but disclose them in the privacy notice where they are personal data. |
Account Preference Cookies | ||||
Explains cookies that remember choices within a user account or dashboard. | Basic | Depends on website features | Account preference cookies remember settings you choose within your account, such as dashboard layout or saved filters. | Preferences requested by the user may differ legally from tracking used for business analytics. |
Multi-Domain Cookies | ||||
Explains cookies shared across related domains or subdomains. | Detailed | Depends on website features | Some cookies may operate across our related domains or subdomains to provide consistent preferences and account access. | Identify the domains involved and avoid unexpected cross-site tracking without consent. |
Cookie Names And Identifiers | ||||
Explains technical cookie names in the cookie table. | Detailed | All websites | Cookie names in this policy may appear as technical identifiers because they are set by website software or third-party providers. | Do not rely on names alone include provider, purpose and duration. |
Cookies Requested By The User | ||||
Explains the exemption for cookies strictly necessary to provide a service requested by the user. | Detailed | All websites | Some cookies are used because they are strictly necessary to provide a service you request, such as secure login, basket functions or form submission. | The exemption is narrow and should not be used for business convenience or analytics. |
Transmission Cookies | ||||
Explains cookies needed solely to transmit a communication over a network. | Detailed | All websites | Certain technical cookies may be used solely to carry out or facilitate transmission of communications over a network. | Do not apply this exemption to cookies with additional tracking, analytics or advertising purposes. |
What Should A UK Cookie Policy Include?
A UK cookie policy should do more than list cookie names. It should explain what cookies are used, why they are used, who sets them, how long they last, and how users can give, refuse or withdraw consent. Under the UK GDPR and Privacy and Electronic Communications Regulations, non-essential cookies normally need clear information and prior consent before they are placed.
When Is Consent Needed For Cookies In The UK?
- Strictly necessary cookies usually do not need consent, but they should still be explained clearly.
- Analytics, advertising, social media, personalisation and most third-party cookies usually require consent before use.
- Consent must be specific and informed, so vague wording such as we use cookies to improve your experience is not enough for detailed cookie use.
- Users must be able to withdraw consent as easily as they gave it, usually through a cookie settings link or preference centre.
Why Should Cookie Policies Be Kept Separate From Cookie Banners?
The cookie banner should capture valid consent, while the cookie policy should provide deeper detail. A useful cookie policy supports the banner by giving users a full cookie table, category explanations, third-party provider information and retention periods.
What Are The Main Drafting Risks For UK Cookie Policies?
- Calling analytics or advertising cookies strictly necessary when they are not.
- Failing to name third-party providers such as analytics, video, payment, chat or advertising services.
- Not explaining cookie duration or whether cookies are session or persistent.
- Using pre-ticked boxes, implied consent or banners with no reject option for non-essential cookies.
- Omitting mobile app, embedded content, pixel, SDK or local storage technologies where they are used.
For UK guidance, see the ICO guidance on cookies and similar technologies at ICO Cookies And Similar Technologies Guidance.
Want to Generate Your own Cookie Policy?
Docaro AI can help you write your own Cookie Policy for use in the United Kingdom in minutes.
FAQs
A United Kingdom Cookie Policy Clause Library is a collection of reusable clauses that explain how cookies and similar technologies are used on a UK website.
Show All FAQs
You Might Also Be Interested In
United Kingdom guide to website features and cookie policy disclosures, helping clarify compliance needs and user transparency.
Explore UK cookie categories for clearer cookie policies, better consent management, and improved compliance with privacy rules.
Do you need a cookie policy in the United Kingdom? Use this guide to understand UK cookie compliance and website obligations.
United Kingdom guide to organisation types and key cookie policy considerations for clearer compliance planning.
United Kingdom cookie duration and retention reference for understanding cookie lifespans, storage periods, and compliance planning.
Learn about cookie user rights and controls in United Kingdom, including consent choices, withdrawals, and privacy compliance essentials.
Understand cookie consent requirements in the United Kingdom with a clear flowchart for UK website compliance.