Blog post overview and metadata
Author, publish date, read time, and category
Cookie Banners and Analytics in the UK: Doing It Properly Without Losing Your Data
Reviewed by: ARS Developer Team | Updated: 30 Sep 2026 | UK Focus: Buyer-intent SEO, web delivery, and measurable conversion growth.
Quick Summary
UK rules require consent before non-essential cookies are set. Most banners get this wrong in a way that is both non-compliant and bad for your analytics.
In This Guide
Why This Article Is Trustworthy
- Reviewed by the ARS Developer editorial team for UK business relevance.
- Structured around buyer-intent SEO, technical delivery, and measurable conversion outcomes.
- Connected to related service pages, pricing guidance, and supporting articles for stronger topic depth.
Quick Answer
Under PECR and UK GDPR, non-essential cookies — including analytics — need consent before they are set, and consent must be as easy to refuse as to give. A banner that loads the tracking anyway, or that offers "Accept" without an equally prominent "Reject", is decoration rather than compliance.
The two failures that appear on most sites
The first is loading the analytics script before the visitor has answered. If the cookie is written as the page renders, the banner is a notification, and the consent it records happened after the thing it was meant to authorise.
The second is making refusal harder than acceptance — a prominent "Accept all" alongside a link to a settings page where refusal takes three more clicks. The ICO has been explicit that this is not valid consent, and it is the pattern most consent plugins ship with by default.
Essential cookies do not need consent, and few cookies are essential
Cookies strictly necessary for a service the user asked for are exempt: the session that keeps them logged in, the basket contents, a load balancer's routing cookie, the record of their consent choice itself.
Analytics is not exempt, however useful it is to you, because the visitor did not ask to be measured. Nor are advertising, heatmapping, session recording or embedded media that sets cookies on load. Auditing which cookies your site actually sets, and why, is the necessary first step — most sites set more than their owners realise, usually through embeds.
Keep useful measurement without pretending
Refusal rates mean analytics under-reports, and the temptation is to make the banner misleading. The better answer is to reduce how much you depend on cookies in the first place. Server-side measurement of the things that matter commercially — enquiries submitted, orders placed, revenue — does not depend on consent because it is your own transaction data.
Privacy-focused analytics tools that avoid cookies and do not identify individuals are also worth considering. They give a consistent picture of traffic rather than a consented sample, which for most business decisions is more useful than a precise view of some visitors.
Honour the choice, and let people change it
Consent has to be withdrawable as easily as it was given, so a persistent link in the footer that reopens the preferences is effectively required. It also has to be recorded: what was consented to, when, and against which version of your cookie list.
Then check that refusal actually works. Refuse, reload, and look at what cookies exist. A surprising number of banners record the refusal correctly and load the scripts regardless, which is the worst of both outcomes — no data you can rely on and no compliance either.
Frequently Asked Questions
Do I need consent for Google Analytics in the UK?
Yes. Analytics cookies are not strictly necessary, so they require consent before being set.
Can "Accept" be more prominent than "Reject"?
No. The ICO expects refusing to be as straightforward as accepting, which means both options at the same level.
What counts as a strictly necessary cookie?
One required to deliver something the user asked for — login sessions, basket contents, security tokens, and the consent record itself.
Will a compliant banner hurt my analytics?
It will reduce recorded sessions. Measuring commercial outcomes server-side gives you numbers that do not depend on consent at all.
Next Step
If you are not sure what your site sets before anyone clicks anything, that is worth checking. Send us the URL and we will tell you what loads.
Next Step Resources
Move from research into action with the most relevant service, proof, pricing, and project planning pages for this topic.
Tags:
Leave a Comment
Ask a practical question, share a project insight, or add a useful note. Every comment is reviewed before it appears publicly.