Website Cookie Policy

What is a website cookie policy?

A website cookie policy will be held by a website operator in the United Kingdom, to provide website users with key information about the use of cookies on the website.

What is the difference between a privacy policy and a cookie policy?

A website privacy policy will be used by a website operator to provide website users with key information about the collection, use and storage of their personal data (personal information such as their name, IP address and contact details). A privacy policy may refer to the use of cookies as part of the wider policy.

A cookie policy will provide comprehensive, specific information about the use of cookies. A privacy policy will often refer to a cookie policy.

Is it mandatory to have a cookie policy?

Yes. In order to comply with the relevant legal regulations, a website that uses cookies must hold a cookie policy.

What is a cookie?

A cookie is a small data file. A cookie is stored on a device and allows online providers to recognise a person as a particular user and allows online providers to store specific details about users. The information collected by cookies might include preferences and login information.

What should be done once the cookie policy has been finalised?

It is not necessary to sign the cookie policy. It can be finalised and placed on the website, in an easily accessible location. The website operator must ensure it obtains consent to use cookies, as appropriate.

What other documents might be required alongside a cookie policy?

A website will need to hold other policies and documents, which refer to or may be read alongside the acceptable use policy. This might include:

• a privacy policy
• terms and conditions of use
• terms and conditions of sale
• an acceptable use policy
• a complaints policy

How long should a cookie policy last for?

A cookie policy can remain in place indefinitely. The website operator should ensure the policy is updated if it changes the way in which it uses cookies The website operator should also ensure that the policy is generally updated and reviewed at regular intervals to ensure that the legal content is kept up-to-date. Typically, a policy of this nature will be reviewed at least annually.

What should a cookie policy contain?

A cookie policy should:

• provide contact details for the website operator
• explain what cookies are
• list the types of cookies used
• explain how cookies will be used
• explain how cookies can be turned off

What laws apply to a cookie policy?

The following legal provisions are relevant to the use of cookies on a website:

• The retained EU General Data Protection Regulation 2016/679 (UK GDPR)
• The retained Privacy and Electronic Communications (EC Directive) Regulations 2003
• The Data Protection Act 2018

Further information on cookies can be found on the Information Commissioner's Office website.

Help from a lawyer

You can choose to consult a lawyer if you need help.

The lawyer can answer your questions or help you through the process. You will be offered this option when you complete the document.

How to modify the template?

You fill out a form. The document is created before your eyes as you respond to the questions.

At the end, you receive it in Word and PDF formats. You can modify it and reuse it.