The Ultimate Guide to Writing a Cookie Policy

A cookie policy is required by law in the USA. In this guide you can read more about the requirements and what you need to include in the cookie policy.

Disclaimer (23rd September 2024): The information on this page is not intended as legal advice and shouldn’t be considered as such. We strongly recommend that you seek legal advice if you’re unsure as to how to become compliant. Please also keep in mind that this guide is not exhaustive and that more requirements might be applicable.

In this ultimate guide to writing a cookie policy, you can learn all about the cookie policy basics, requirements and how to implement a cookie policy on your website.

Cookie Policy Guide Agenda

What is a cookie policy?

A cookie policy is where you communicate to your website visitors, e.g., how you use cookies, for what purpose, what types of cookies you are using, and when the cookies expire.

You must inform your users about the cookies when they visit your website and make sure that you give them detailed information about your cookies. You can often find this information in or as a part of your privacy policy or as a separate cookie policy.

Why do you need a cookie policy?

Your cookie policy is where you communicate to your website visitors the details about how you use cookies on your website. You need a cookie policy because you are legally required to give people this information.

Your cookie policy, the GDPR and cookie laws

At AI CERTs™, we respect your privacy and are committed to ensuring transparency in our use of cookies on this website. We comply with the General Data Protection Regulation (GDPR) and other applicable cookie laws. GDPR requires that we obtain explicit consent from users before placing non-essential cookies on their devices. As we currently do not use third-party services, our cookies are only related to website functionality, primarily through Elementor, our WordPress page builder.

GDPR information requirements Art. 13 - Right to information

Under Article 13 of the GDPR, AI CERTs™ must inform users about the collection and use of their personal data, including cookie-related data. This information must be provided in clear and plain language before any personal data is processed. Although our current use of cookies is limited to functionality, this policy will evolve as needed to ensure full compliance.

What is the difference between a cookie policy and a privacy policy?

A cookie policy specifically outlines the types of cookies used on our website, their purpose, and how users can control them. A privacy policy, on the other hand, covers broader aspects of data collection, usage, and protection, including personal information gathered through forms, accounts, and other means. Both policies aim to protect user data but focus on different aspects of data collection.

Where should the cookie policy page be located?

The cookie policy should be easily accessible to all users of AI CERTs™ website. It is recommended to place a link to this page in the website footer, alongside the privacy policy, terms of service, and other legal documentation. This ensures users can review the policy before using our website or giving consent to cookies.

What you need to include in your cookie policy

Since we currently do not use third-party cookies, our cookie policy includes details on:

  • The use of cookies by Elementor, which is necessary for the website to function.
  • How users can manage or disable cookies through their browser settings.
  • Information on future updates if third-party cookies are implemented.

How to write your cookie policy

When writing your cookie policy, ensure that it is:

  • Clear and transparent: Use simple language to explain what cookies are and why they are used.
  • Up-to-date: Reflect any changes in how cookies are used, especially if third-party services are added later.
  • User-focused: Provide instructions on how users can opt out or manage their cookie preferences. AI CERTs™ takes care in ensuring this policy evolves with future website changes.

Cookie policy generator or template

For businesses seeking an easy way to create a cookie policy, there are various cookie policy generators and templates available online. However, it’s essential to tailor these templates to your specific use of cookies, ensuring compliance with GDPR and any other relevant regulations. Given AI CERTs™ limited use of cookies, a simple, straightforward policy like this one is adequate.

AI CERTs™ Store cookie policy template

This template provides an example of a cookie policy based on AI CERTs™ current setup:

  • We use functional cookies only
    • Via Elementor to enhance the website’s performance.
    • Via WooCommerce to enhance order attribution feature.
    • Via WooCommerce Stripe Gateway & WooPayments to deal with real time payment.
  • No any other third-party tracking or advertising cookies are currently in use.
  • Users can manage cookie settings via their browser.

Cookie policy generator or template

If AI CERTs™ expands its services or begins to use third-party tools, a cookie policy generator can help quickly adapt to those changes. Tools like Cookiebot, iubenda, or similar platforms can generate a detailed cookie policy that covers third-party tracking, analytics, and consent mechanisms.