Cookie Policy UK -- Do I Need One and What Must It Say?

If your website uses cookies -- and almost all do -- you need a Cookie Policy and valid consent. Here's what the law requires.

If your website sets any cookies other than those strictly necessary for the site to function, you need a Cookie Policy and valid user consent. This is required by the Privacy and Electronic Communications Regulations 2003 (PECR), as supplemented by the Data (Use and Access) Act 2025.

Almost certainly yes. If you use Google Analytics, any advertising platform, social media widgets, embedded videos, or a cookie-based login, your website sets cookies. Even basic platforms like WordPress and Shopify set cookies.

Back to Termsmith

Loading interactive view…