UK GDPR

UK GDPR and cookie consent, for small businesses.

The UK GDPR and the Privacy and Electronic Communications Regulations (PECR) cover websites with UK visitors. TermsFeed writes your Privacy Policy and asks UK visitors for consent before tracking starts.

Create your consent banner Generate Privacy Policy
UK GDPRPECRData (Use and Access) Act 2025

By law

When the UK GDPR and PECR apply to your business.

The UK GDPR follows the people your business serves, and PECR covers every website that stores cookies on a device in the UK. A business outside the UK falls under both when it serves or tracks people in the UK.

When the UK GDPR and PECR apply to a business, and what the business needs
Your businessWhat you needWhy
Sells goods or services to people in the UK, from any country Privacy PolicyConsent banner UK GDPR Article 3(2)(a) brings a business outside the UK under the UK GDPR when the business offers goods or services to people in the UK, paid or free.
Tracks UK visitors with analytics or advertising tools (Google Analytics 4, Meta Pixel, Hotjar) Privacy PolicyConsent banner UK GDPR Article 3(2)(b) covers monitoring the behavior of people in the UK. PECR regulation 6 asks for consent before cookies that are not exempt.
Has an office or staff in the UK Privacy PolicyConsent banner UK GDPR Article 3(1) covers every business established in the UK, wherever the business processes the data.
Uses analytics cookies only to improve the website Privacy PolicyWay to object Since 5 February 2026, PECR Schedule A1 exempts cookies used only for statistics that improve the website, when visitors get clear information and a simple, free way to object.

What the UK GDPR and PECR ask, and the TermsFeed product for each part.

The UK GDPR, PECR and guidance from the Information Commissioner (ICO) set these rules for a website. TermsFeed products help with all 7, and your team answers each data request.

UK GDPR and PECR requirements for a website, with the TermsFeed product for each
What the law asksWhere it comes fromHow TermsFeed helps
Tell visitors what personal data you collect, why, and for how long UK GDPR, Articles 13 and 14
  • Privacy Policy Generator
Explain each cookie and its purpose PECR, regulation 6
  • Cookies Policy Generator
Ask for consent before cookies that are not exempt load PECR, regulation 6 and Schedule A1
  • Privacy Consent
Make rejecting as easy as accepting, with nothing switched on in advance ICO guidance on storage and access technologies
  • Privacy Consent
Give a simple, free way to object to exempt analytics and preference cookies PECR, Schedule A1, paragraphs 5 and 6
  • Privacy Consent
Keep a record of each consent UK GDPR, Article 7(1)
  • Privacy Consent
Answer requests to access or delete personal data within 1 month UK GDPR, Articles 12(3), 15 and 17
  • Handled by your team

How Privacy Consent handles visitors from the UK.

TermsFeed Privacy Consent asks UK visitors for consent before vendor scripts load, and records every choice in the consent log.

  • Consent before tracking

    Privacy Consent holds back analytics, advertising and embedded content until the visitor agrees, as PECR regulation 6 asks.

  • A real choice for each visitor

    The consent banner lets each visitor accept, reject or choose by category, with no option switched on in advance.

  • Object or withdraw at any time

    The Preferences Center lets each visitor switch off a category at any time, for consent and for exempt cookies alike.

  • A record of every choice

    Privacy Consent keeps a dated record of every consent choice for a regulator or a client who asks, with CSV export on every plan.

  • Analytics behind consent

    Privacy Consent keeps analytics behind consent unless you decide otherwise. The 2026 exception covers analytics only when statistics are the sole purpose.

  • The EU and Switzerland too

    Privacy Consent applies the same opt-in rules to visitors in the EU, the EEA and Switzerland.

What the laws ask

What privacy laws expect, and how TermsFeed covers it.

The UK GDPR covers personal data, and PECR covers cookies and similar technologies. Each row names the law, when it applies and the part TermsFeed handles.

Consent laws, what is at stake and how Privacy Consent covers each one
Law Applies when What it can cost How TermsFeed covers it
UK GDPR United Kingdom A business offers goods or services to people in the UK, or monitors their behavior. Up to £17.5 million or 4% of worldwide annual turnover, whichever is higher (Data Protection Act 2018, section 157).
  • A Privacy Policy that covers the UK GDPR
  • The same consent banner for UK visitors
  • Consent log of every choice
PECR UK cookie rules A website stores or reads cookies on a device that a visitor uses in the UK. Consent comes first, except for the exemptions in Schedule A1. Up to £17.5 million or 4% of worldwide annual turnover, whichever is higher, for breaches from 5 February 2026 (PECR, as amended by the Data (Use and Access) Act 2025).
  • Loads vendor scripts and embeds only after consent
  • Preferences Center to change or withdraw consent

A summary for orientation, not legal advice.

How Privacy Consent compares.

Free cookie plugins cover the basics, and doing it yourself means adding every script block and consent rule by hand. Privacy Consent keeps the rules for each region current, with a free plan to start.

Free cookie plugins, doing it yourself and TermsFeed Privacy Consent compared
Feature Free cookie plugins Doing it yourselfBanner and scripts coded by hand TermsFeed Privacy Consent
Price Free No fee, only your time Free plan. Paid plans from $9 a month
Blocks scripts until consent Varies Manual Yes, on every plan
Rules by visitor location Rarely Rarely Yes, from the Starter plan
Consent log Varies Rarely Yes, with export on every plan

Privacy Consent plans.

Every plan includes the consent banner, Google Consent Mode v2 and the Preferences Center. Paid plans add rules by visitor location managed by TermsFeed, more banner loads and more domains. On the Free plan, a banner that keeps using up its banner loads pauses until the next month or an upgrade.

Billing period

Switch to yearly to pay less.

Billed once a year.

Free

One small website that needs a consent banner.

$0 / month / year

Start for free
  • Included: 1 domain
  • Included: 15,000 banner loads a month
  • Included: 10 vendors
  • Included: Consent log kept 180 days
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
Standard consent logic starts here

Starter

A business website with visitors from several countries.

$9 / month

$89 / year

Or $89 a year with yearly billing.

About $7.42 a month. Saves $19 a year against monthly billing.

Choose Starter Choose Starter
  • Included: 1 domain
  • Higher than the plan before: 125,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: 25 vendors
  • Higher than the plan before: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Plus
  • Higher than the plan before: 125,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: 25 vendors
  • Higher than the plan before: Consent log kept 730 days (24 months)
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Basic consent analytics

Pro

A growing business with several websites.

$24 / month

$229 / year

Or $229 a year with yearly billing.

About $19.08 a month. Saves $59 a year against monthly billing.

Choose Pro Choose Pro
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Plus
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Full consent analytics

Business

High-traffic websites and businesses with many brands.

$59 / month

$569 / year

Or $569 a year with yearly billing.

About $47.42 a month. Saves $139 a year against monthly billing.

Choose Business Choose Business
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Full consent analytics
  • Plus
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Overage 30% lower than Pro

Prices in US dollars (USD). Cancel your subscription anytime.

Helping businesses since 2012 Free plans available Monthly or yearly billing Cancel anytime

Helping businesses since 2012.

Over 1.9 million customers have created a legal agreement with TermsFeed.

It makes creation of a long Terms and Conditions easier by just putting the important details and ticking some boxes.
CEO Information Technology and Services 50-100 Employees G2 ·
Excellent. Very Happy. TermsFeed gave me everything I needed with minimal effort on my part. Their support team is great and able to troubleshoot and make any changes that are needed for your site. Even with email support, Customer Support is very responsive. I have total confidence in using this service and their support.
CEO Information Technology and Services 1-10 Employees Capterra ·
Elegant solution, reasonable cost and fantastic support.
Managing Partner Information Technology and Services 1-10 Employees Capterra ·
Great Service! 10 out of 10 experience with them. Very fast and easy to use system. Very quick turnaround times with customer support and super easy system to use.
CEO Airlines/Aviation 1-10 Employees Capterra ·
Termsfeed is really easy to use. I don't need any legal knowledge to create legal documents. It might be pricey for small companies and startups.
Application Development Analyst Information Technology and Services 50-100 Employees G2 ·
TermsFeed is very easy to use with user-friendly interface. It helps me to draw out the Terms & Conditions along with Privacy Policies for the business and stay in grounds with the regulations and compliance. The cookie content for websites is very easy to manage with TermsFeed. The technical support team is great in assisting the users. A little expensive than the other similar products available in the market. The payment interface should be updated to be more clear to the users.
Java Software Developer Information Technology and Services 50-100 Employees G2 ·
TermsFeed is easy to use and understand. TermsFeed has great customer service and offers many features.
CRA Misc 1-50 Employees G2 ·
Excellent customer support! Fully functional system at low cost. Easy to understand.
Operations Director Design 1-10 Employees Capterra ·

Capterra reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Capterra or its affiliates.

Frequently asked questions about the UK GDPR.

Answers to the questions small businesses ask about UK cookie rules, the UK GDPR and the 2026 changes.

Do I need a cookie banner for UK visitors?

Do analytics cookies still need consent in the UK?

Does the UK GDPR apply to my business outside the UK?

The UK GDPR applies to your business outside the UK when you offer goods or services to people in the UK, or monitor their behavior in the UK. UK GDPR Article 3(2) sets these 2 cases.

Analytics and advertising tools that follow UK visitors count as monitoring. Check the table on this page to see which case fits your business.

What are the fines for cookie breaches in the UK?

Is the UK GDPR the same as the EU GDPR?

No, the UK GDPR is a separate UK law, based on the text of the EU GDPR. The Information Commissioner enforces the UK GDPR, alongside the Data Protection Act 2018 and PECR.

A business with visitors in the UK and in the EU meets both laws. Privacy Consent applies the opt-in rules to visitors in both regions, and the Privacy Policy Generator writes sections for the GDPR and the UK GDPR.

More solutions.

Each solution page lists what a law or a platform asks of your website, and which TermsFeed product covers each part.

GDPR Consent from visitors in the EU before cookies load, with a Privacy Policy and a record of every consent. CCPA+CPRA A Privacy Policy, the Do Not Sell or Share link and Global Privacy Control, for California residents. US state privacy laws Opt-outs, Global Privacy Control and privacy notices for the 19 US states with privacy laws in effect. Canada (PIPEDA and Law 25) PIPEDA consent and Quebec Law 25, with tracking off until Quebec visitors agree. Switzerland (FADP) The FADP privacy notice and the Swiss cookie rules, with opt-in consent for Swiss visitors. LGPD (Brazil) Visitors from Brazil get clear privacy information, a reject button and revocable consent. COPPA The privacy notice for websites and apps aimed at children under 13, and the 2025 rule changes. Shopify Privacy Consent in your theme, connected to the Shopify Customer Privacy API. WordPress Privacy Consent on any WordPress theme, the WordPress Consent API, and free legal pages with AutoTerms. Wix Privacy Consent in Wix Custom Code, with the Wix cookie banner turned off. Squarespace Privacy Consent in Squarespace Code Injection, and Squarespace Analytics in your Cookies Policy. Webflow Privacy Consent in the Webflow Head code, with embeds that wait for consent. Online stores A Privacy Policy, a Return and Refund Policy and a consent banner for stores that sell online. SaaS Terms and Conditions, a Privacy Policy and a consent banner for software sold by subscription. Mobile apps The Privacy Policy and EULA that the Apple App Store and Google Play ask for. Global Privacy Control The browser opt-out signal 10 US states require, honored by Privacy Consent on every plan. Google Consent Mode v2 Consent signals for Google Ads and Google Analytics 4, sent from Privacy Consent with code from the docs.