Cookie Notice
A free, editable Word cookie notice for UK websites, governed by the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR, explaining cookie categories, the consent rule (strictly-necessary cookies exempt), a fill-in cookie table, third-party cookies, and how visitors manage or withdraw consent, with an ICO complaint route.
What's inside
A complete, UK-drafted cookie notice
- Plain-English explanation of cookies and similar technologies
- The PECR consent rule (reg 6) with the strictly-necessary exemption
- The four cookie categories and a fill-in cookie table (name / provider / purpose / duration)
- How consent is obtained and how visitors withdraw it or change browser settings
- Third-party cookies, a 'Do Not Track' position, and a cross-reference to your privacy policy
- A contact and ICO-complaint block, governed by England & Wales
How it works
- 1
Tell us where to send it
Enter your name, work email and organisation. We email you an editable Microsoft Word (.docx) file, personalised with your name.
- 2
Fill in the bracketed fields
Open it in Word, Google Docs or LibreOffice and complete every [bracketed] field with your details and commercial terms.
- 3
Review and adapt before use
Adapt the clauses to your circumstances and have it reviewed by a qualified solicitor before you sign or publish it.
This template is not legal advice. Writford is a software company, not a law firm, and is not regulated by the SRA. This document is a starting point that must be reviewed, adapted and approved by a qualified solicitor before use. It was last reviewed on 25 June 2026.
Get the free template
We email you an editable Word copy, personalised with your name. No account needed.
Looking for something else? Browse all templates.
Do I need a cookie banner on a UK website?
You need consent before setting any cookie that is not strictly necessary for the service the visitor asked for. Analytics and advertising cookies need consent. A cookie that keeps a shopping basket working does not.
- Which cookies count as strictly necessary?
- Ones without which the service the visitor asked for cannot work: a login session, a shopping basket, a security token. Analytics is not strictly necessary, however useful it is to you.
- Does the banner need a Reject button?
- Refusing should be as easy as accepting. A banner offering only Accept, or hiding refusal behind several clicks, is the pattern the regulator has criticised most often.
- Can I set analytics cookies before the visitor chooses?
- No. Non-essential cookies wait until consent is given. Loading the tag first and asking afterwards defeats the point.
- Do I need a cookie notice if I only use essential cookies?
- You still have to tell people what you set and why, but you do not need to ask permission for cookies that are strictly necessary.
- How long does consent last?
- There is no fixed period. Asking again after six to twelve months is common practice, and people must be able to change their mind easily at any time.