Consent, Clearly: Writing a Cookie Notice People Can Actually Read

Most cookie banners are not really talking to people. They are talking to a compliance checklist while a visitor stands there wondering whether 'legitimate interest' is a type of biscuit. That is a brand problem as much as a legal one.

In the UK, cookie consent is governed by UK GDPR and the Privacy and Electronic Communications Regulations, with the Information Commissioner's Office setting out expectations. None of that requires your notice to read like a fax from 2003. You still need proper legal review. But you do not need to punish every visitor with a paragraph of fog before they can read your homepage.

At OneLine Studio, we think consent copy is brand copy. It is one of the first things people read on your site. If it sounds evasive, they notice. If it sounds human, they relax. If the buttons are honest, they trust you more. If 'Accept all' is bright green and 'Reject all' is a grey link hiding behind a spanner icon, they learn something about your organisation. Not a flattering thing.

The legal fog problem

Here is a familiar before example, based on the sort of thing UK visitors see every day:

We and our 847 partners store and/or access information on a device, such as cookies, and process personal data, such as unique identifiers and standard information sent by a device, for personalised ads and content, ad and content measurement, audience insights and product development. You may use your right to object to processing based on legitimate interest. Manage preferences.

That is not a sentence. It is a weather system. It contains real legal concepts, but it does not help a person make a choice. It also makes the 'Manage preferences' route feel like the responsible adult option and 'Accept all' feel like the only way out. That is not clarity. It is a maze with a cookie policy link.

The one-line consent notice

A better notice answers three things quickly: what you use cookies for, why it matters to the visitor, and what choices they have. You can usually do that in one clear sentence, maybe two if the site is complex.

After example:

We use cookies to keep the site working and to understand which pages help people most. Choose what you are happy with; you can change your mind anytime.

Then the buttons: 'Accept all', 'Reject all', 'Manage preferences'. Same row. Same prominence. No tricks. No 'Agree and continue'. No pre-ticked boxes. No guilt copy about how the site is funded. Just an honest offer and a clear route out.

This is the one-line philosophy applied to consent. Not because every legal notice should be one sentence forever. Because the first thing a visitor sees should be a single, readable thought. The detail can live in the preference centre and the cookie policy. That is where the named vendors, retention periods and lawful bases belong. Do not make the banner do the job of the privacy notice.

Honest choices, not dark patterns

UK consent needs to be freely given, specific, informed and unambiguous. In plain English: do not make refusal harder than acceptance. Do not bundle consent into your terms and conditions. Do not pretend a visitor has agreed because they scrolled. Do not make 'Reject all' available only after three clicks through a settings menu.

Equal prominence is not just a legal nicety. It is a design decision that tells people what kind of organisation you are. A UK retailer that makes 'Reject all' as easy to find as 'Accept all' is saying: we are not afraid of your choice. A site that hides refusal is saying: we would rather have the data than your trust. Visitors may not use those words, but they feel the difference.

Plain-English categories help too. 'Essential cookies keep the site working.' 'Analytics cookies help us see which pages are useful.' 'Marketing cookies help us show relevant ads.' Keep each description short. Use 'we' and 'you'. Avoid 'the controller' in the banner. Save the formal language for the policy, where the reader expects it.

Withdrawal should be as easy as consent. If someone can accept in one click, they should be able to change their mind in one click from a persistent cookie settings link. That link should be in the footer, not buried in a sub-menu called 'Legal'. A small thing, but it signals that consent is an ongoing choice rather than a trapdoor.

Where legal review still matters

This is a microcopy guide, not legal advice. Cookie compliance depends on what your site actually does, which vendors you use, where data goes, how long it is kept and how you record consent. A beautiful sentence cannot fix a broken consent mechanism.

Get proper review from a qualified legal adviser or data protection officer, especially if you use analytics, advertising pixels, embedded media, international transfers or third-party partners. Check current ICO guidance rather than a blog post from years ago. Privacy expectations keep evolving, and 2026 is not the moment to rely on copy-and-paste consent text from a template pack.

Also check the mechanics. Are non-essential cookies blocked before consent? Does 'Reject all' actually reject all? Are preferences saved and respected? Can people withdraw consent easily? If the answer to any of those is no, rewrite the banner after you fix the plumbing. Otherwise you are just putting a friendly hat on a leaky pipe.

A practical before and after for a UK brand

Imagine a fictional UK homeware shop, Harbour & Finch. Before: a full-screen overlay with a paragraph about 'partners', 'unique identifiers', 'legitimate interests' and a single bright 'Accept' button. A tiny 'Preferences' link sits in the corner. The effect is less 'we value your privacy' and more 'please go away, but buy a lamp first'.

After: a compact banner at the bottom of the screen. One sentence: 'We use cookies to keep the shop working and to understand which products people find useful. Choose what you are happy with.' Three equally weighted buttons: 'Accept all', 'Reject all', 'Manage preferences'. A short link to the cookie policy. A footer link to change settings later. Nothing clever. Nothing hidden. It feels like a shop, not a law firm.

Read it aloud before you ship it

Here is a simple test. Read your cookie notice out loud. If you stumble, rewrite it. If you would not say it to a customer at a till, rewrite it. If the only clear option is acceptance, redesign it. If the policy link is doing all the explaining, move the essential detail into the banner and keep the sentence short.

The best consent notice is not the one that wins a legal drafting prize. It is the one that lets someone make a real choice without feeling tricked, bored or mildly suspicious. One clear line. Honest buttons. Proper review behind the scenes. That is how consent earns trust instead of spending it.