Country-specific legal content
Drafted with legal expertise for each jurisdiction, far more thorough than AI-generated drafts that copy generic clauses across borders.
A cookie policy informs website visitors about the cookies and tracking technologies your site uses. Use our free UK template to create a clear, compliant cookie policy that meets the requirements of the UK GDPR and the Privacy and Electronic Communications Regulations 2003.
PDF (free) + editable Word (.docx) with Expert
Available as a print-ready PDF or an editable Microsoft Word (.docx) file.
A cookie policy is a document published on a website that explains what cookies and similar technologies are used, what data they collect, why they are used and how visitors can manage their preferences. It is a key part of any website’s privacy compliance framework.
In the UK, the use of cookies is regulated by the Privacy and Electronic Communications Regulations 2003 (PECR) alongside the UK General Data Protection Regulation (UK GDPR). PECR requires that website operators obtain informed consent before placing non-essential cookies on a visitor’s device.
The UK Information Commissioner’s Office (ICO) actively enforces cookie compliance in Britain and has issued detailed guidance on what constitutes valid consent under English law. A clear and accurate UK cookie policy is essential for demonstrating compliance and building trust with your British visitors.
Our cookie policy template covers everything you need to inform visitors and comply with UK regulations.
A plain-language explanation of cookies and similar technologies for non-technical visitors.
Classification of cookies by purpose: strictly necessary, performance, functionality and targeting cookies.
Details of cookies set directly by your website, their names, purposes and expiry periods.
Information about cookies set by external services such as Google Analytics, social media plugins and advertising networks.
Explanation of how visitors can give, refuse or withdraw consent through your cookie banner or preference centre.
Instructions for controlling cookies through browser settings, with links to guides for major browsers.
What personal data cookies may collect, such as IP addresses, browsing behaviour and device information.
Whether cookie data is shared with third parties and the purposes for which it is shared.
How long each category of cookie remains on the visitor’s device before expiring.
Details of the data controller and how visitors can contact you with questions or complaints about cookies.
Follow these steps to produce a clear and compliant cookie policy for your website.
Scan your website to identify all cookies and tracking technologies in use, including those set by third-party services.
Group cookies by type: strictly necessary, performance, functionality and targeting. Record each cookie’s name, purpose and duration.
Explain what data each category of cookie collects and how that data is used, stored and shared.
Ensure your website has a cookie banner or preference centre that allows visitors to accept, reject and manage non-essential cookies.
Publish the policy on your website with a prominent link. Review and update it whenever you add new cookies or change your tracking practices.
Four things that make our templates more thorough than AI-generated drafts and more current than static template libraries.
Drafted with legal expertise for each jurisdiction, far more thorough than AI-generated drafts that copy generic clauses across borders.
Templates carrying statute references are continuously updated as the law changes. Your document always reflects the current legal framework.
Free to download. Vector text, embedded fonts, statute citations baked in. Print, sign, file. Ready for any signing flow including electronic signature.
Continue editing in Word after download. Add custom clauses, reuse the template for similar agreements, or share with a colleague for collaborative review.
Requires Expert one-time unlock or any paid Doxuno subscription.
Cookie compliance in the UK involves both PECR and the UK GDPR working together.
This template is for informational purposes only and does not constitute legal advice. Consult a qualified solicitor for advice specific to your situation.
Reviewed for England & Wales law
Regulation 6 of UK PECR requires that website operators in England and Wales obtain consent before storing or accessing information on a user’s device, unless the cookie is strictly necessary for providing a service the user has requested. Pre-ticked boxes and implied consent do not constitute valid consent under British law.
Where cookies collect personal data in the United Kingdom, the UK GDPR applies. British consent must be freely given, specific, informed and unambiguous. The UK website must be able to demonstrate that consent was obtained and provide an easy way for users to withdraw it under English data protection law.
The UK ICO has the power to issue enforcement notices and fines for non-compliance with PECR in Britain. In recent years, the ICO has increased its focus on cookie compliance and has taken action against British websites that use cookie walls, dark patterns or fail to obtain valid consent under English law.
The UK ICO has confirmed that analytics cookies (including Google Analytics) are not strictly necessary and require consent from British users. Marketing and advertising cookies always require explicit opt-in consent before being placed on the user’s device under UK PECR and the UK GDPR.
Ensure your website is compliant with UK cookie regulations. Fill in the details, preview your policy and download it as a PDF in minutes.
Free PDF · Editable Word with Expert · No account required