[Home](https://robotlawyer.co/) › [Documents](https://robotlawyer.co/documents) › [Policies](https://robotlawyer.co/documents/categories/policies) › Cookies Policy # Cookies Policy [Policies](https://robotlawyer.co/documents/categories/policies) [Business Formation](https://robotlawyer.co/documents/categories/business-formation) Overview A verified cookies policy tells website visitors which cookies you use, why, which need consent and how to change their choices. Drafted for the privacy law that applies to your site. Solution Cookies Policy [Create Document](https://robotlawyer.co/documents/cookies-policy/start) Start the questionnaire to generate your document Full Details ## Cookies Policy: Create a Verified Cookie Policy for Your Website A **verified cookies policy** explains to visitors which cookies and similar technologies your website or app uses, what they do, which ones need consent and how visitors can accept, refuse or change their choices. Robot Lawyer drafts the policy from your answers, in plain English and under the privacy law that applies to your site. On the Verified plan, a legal professional checks it before you publish it. [Create Document ➝](https://robotlawyer.co/documents/cookies-policy/start) --- ### CONTENTS [What Is a Cookies Policy?](#what-is-a-cookies-policy) [Do You Need a Cookies Policy?](#do-you-need-one) [What's Included in Your Cookies Policy?](#whats-included) [Cookie Consent Rules in Different Countries](#cookie-rules-by-country) [How It Works on Robot Lawyer](#how-it-works) [How Much Does It Cost?](#cost) [Cookies Policy FAQs](#faqs) [Create a Verified Cookies Policy](#get-started) --- ### What Is a Cookies Policy? Cookies are small files stored on a visitor's device when they use a website. Similar technologies include pixels, tags, local storage and device fingerprinting. A cookies policy is a public notice, usually linked from your website footer and cookie banner, that explains how you use them. It works alongside your [Privacy Policy](https://robotlawyer.co/documents/privacy-policy), which covers your wider use of personal data, and your cookie banner, which collects visitors' choices. --- ### Do You Need a Cookies Policy? If your website uses any cookies or similar technologies, you almost certainly need to tell visitors about them. - **Transparency** Most privacy laws expect you to tell visitors clearly what you collect and why, and cookies are no exception. - **Consent or opt-out** Many countries require consent before non-essential cookies are set, while others give visitors the right to opt out of certain tracking. - **Personal data** Where cookies collect personal data, such as identifiers used for advertising, wider data protection law applies too. The rules depend on where your business and your visitors are, so your policy is drafted for the law that applies to your site. A clear cookies policy is good practice wherever you operate. --- ### What's Included in Your Cookies Policy? - **Who you are** The website owner or operator, their address and a link to your privacy policy. - **What cookies are** A plain explanation of cookies and similar technologies, and the types you use, such as session, persistent, first-party and third-party cookies. - **How you use cookies** Each category you use and whether it needs consent: strictly necessary, functionality, analytics and advertising. - **Consent** How visitors give consent, and that rejecting is as easy as accepting. - **Managing choices** How visitors can change their preferences or withdraw consent, including through browser settings. - **Third parties** The providers who receive cookie data and why. - **International transfers** Whether cookie data leaves the country and the safeguards in place. - **Data protection, updates and contact** The lawful basis, how long cookies last, how you will tell visitors about changes and who to contact. --- ### Cookie Consent Rules in Different Countries Where consent is required, strictly necessary cookies, such as those for sign-in, security or a shopping basket, can usually be set without it, while advertising and tracking cookies need it first. Valid consent is a clear positive action: continued browsing and pre-ticked boxes don't count. The main rules vary: - **UK** The Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR require clear information and, for most non-essential cookies, consent. Since the Data (Use and Access) Act 2025, some low-risk cookies, such as certain analytics used only to improve your own site, can be set without consent if visitors get clear information and a simple way to object. - **EU and EEA** The ePrivacy Directive and the GDPR require consent for non-essential cookies, and visitors must be able to withdraw it as easily as they gave it. - **United States** There is no general federal cookie consent law, but some state privacy laws, such as California's, require notice and a right to opt out of the sale or sharing of personal information, which can include advertising cookies. - **Canada** Federal privacy law requires meaningful consent, and Québec requires technologies that can identify, locate or profile a person to be switched off by default. - **Australia** There is no specific cookie consent law, but the Privacy Act 1988 applies to many businesses where cookies collect personal information. Your policy describes each category in line with the answers you give, so it matches what your site actually does. These notes are general, so check the current rules where you operate. --- ### How It Works on Robot Lawyer 1. **Answer the questions** Tell us about your business, the cookies your site uses, how you collect consent, any third parties and how visitors can contact you. 2. **Generate your policy** We draft a clear, structured policy under the law that applies to your site. 3. **Get it verified** On the Verified plan, a qualified legal professional checks your policy within 24 hours and makes amendments where needed. See [how our documents are verified](https://robotlawyer.co/how-our-documents-are-verified). 4. **Publish it** Add it to your website, link it from your footer and cookie banner, and keep it up to date. [Create Document ➝](https://robotlawyer.co/documents/cookies-policy/start) --- ### How Much Does It Cost? Robot Lawyer is a subscription. The Essentials plan is £13.99 a month, and the Verified plan, which includes verification of your finished policy by a legal professional, is £24.99 a month. Both start with a 7-day free trial. See our [pricing](https://robotlawyer.co/pricing). --- ### Cookies Policy FAQs #### Is there a cookie policy template for UK websites? Yes. Robot Lawyer drafts a cookies policy for UK websites under PECR and the UK GDPR, based on the cookies your site actually uses, rather than a one-size-fits-all template. #### What's the difference between a cookies policy and a privacy policy? A privacy policy explains how you collect and use personal data generally. A cookies policy focuses on cookies and similar technologies. Many businesses keep them separate and link the two. #### Do I need a cookie banner as well as a cookies policy? If you use cookies that need consent, yes. The banner collects consent before those cookies are set, and the policy gives the full details. #### Do I need consent for Google Analytics? It depends on the law that applies. In the EU and the UK, third-party analytics tools generally need consent, although the UK now exempts some analytics used only to improve your own site under strict conditions. In many other countries, clear notice and an opt-out may be enough, so check how your provider uses the data. #### How often should I update my cookies policy? Whenever you add, remove or change cookies or providers, and at least once a year. An out-of-date policy can mislead visitors. #### Does my website need a cookies policy if I only use essential cookies? Even if you don't need consent, you should still tell visitors what the cookies are and why you use them. A short cookies policy is the simplest way to do this. --- ### Create a Verified Cookies Policy Be clear and compliant about the cookies your site uses. Related documents: [Privacy Policy](https://robotlawyer.co/documents/privacy-policy), [Terms of Service](https://robotlawyer.co/documents/terms-of-service), [Data Breach Policy](https://robotlawyer.co/documents/data-breach-policy) and [Website Development Agreement](https://robotlawyer.co/documents/website-development-agreement). [Create Document ➝](https://robotlawyer.co/documents/cookies-policy/start) Solution Cookies Policy [Create Document](https://robotlawyer.co/documents/cookies-policy/start) Similar Services - [Privacy Policy](https://robotlawyer.co/documents/privacy-policy): A verified privacy policy tells people what personal data you collect, why you use it, who you share it with and their rights. Drafted for your countr... - [Terms of Service](https://robotlawyer.co/documents/terms-of-service): Verified terms of service set the rules for using your website, app or online service: what users can do, how payment works and how you limit your lia... - [Data Breach Policy](https://robotlawyer.co/documents/data-breach-policy): A Data Breach Policy is a strategic document that outlines the procedures an organisation must follow in the event of a data breach - [Data Protection Policy](https://robotlawyer.co/documents/data-protection-policy): A data protection policy tells staff how to handle personal data lawfully: collecting, using, sharing, keeping and protecting it, and dealing with req... - [Legitimate Interest Assessment (LIA)](https://robotlawyer.co/documents/legitimate-interest-assessment-lia): A Legitimate Interest Assessment helps businesses determine if they can process personal data based on "legitimate interests" under data protection re... - [Data Processing Agreement (DPA)](https://robotlawyer.co/documents/data-processing-agreement-dpa): A Data Processing Agreement records the terms on which a processor handles personal data for a controller, including the processing details and the pa...