Cookie and GDPR Consent Basics

If the site uses cookies for anything beyond the bare essentials (analytics, embedded videos, forms), visitors in the UK and EU need to be asked for consent first.

What needs consent

• Analytics tools (like Google Analytics)
• Embedded third-party content that sets cookies (some video embeds, social media widgets)
• Marketing or tracking pixels

Strictly necessary cookies (ones required for the site to function, like remembering a login session) don’t need consent, but should still be disclosed in a cookie policy.

How this usually works on WordPress

A cookie consent banner (either from a dedicated plugin or built into the theme) should appear for new visitors, allowing them to accept or reject non-essential cookies before those cookies are set.

Your role in this

If you’re adding a new embed, form, or tracking script to a page, it’s worth checking with your site administrator whether it needs to be added to the cookie policy or covered by the consent tool, rather than assuming it’s already covered.

Careful: This is general awareness information, not legal advice – if you’re responsible for compliance decisions, it’s worth checking current guidance from your relevant data protection authority directly.