Your site stores small files called cookies on a visitor’s device to help the site run effectively and remember preferences. If you have visitors from the EU or UK, having a dedicated cookie policy on your site is often a legal requirement. 

Your policy should include:

• A full list of every cookie your site uses - Group your cookies by their purpose, such as necessary, functional, analytics, or marketing. 

• Consent management - Provide instructions on how visitors can change or withdraw their consent on your site at any time. 

• Cross-border data transfers - State if you send or store personal data in countries outside the European Economic Area. 

• Specific details for each cookie - Explain why you use each cookie, how long it stays on a device, and the legal reason you’re allowed to use it (such as getting explicit consent from the visitor). 

• Third-party disclosures - List any other companies (such as Google or Meta) that receive data through your cookies and link to their privacy policies. 

• Visitor rights - Explain the rights visitors have under the GDPR, such as the right to access, correct, or delete their personal data. 

• Your identity and contact information - Include a link to your imprint page that includes your full name and contact details as the site owner.