Posts

Cookie Law Basics: What Your Website Needs in the UK, EU and US

Image
  If your cookie banner went up at launch and hasn't been checked since, it may not follow the rules it was meant to. This post gives you the basics in one place, so you know what applies to your site and what to fix. Quick answer: Cookie law is a group of regional rules about cookies and similar trackers. In the EU and UK, you need a clear yes before non-essential cookies run. In much of the US, you must let people opt out. Everywhere, you need to say what you use and why. What counts as a cookie? A cookie is a small text file a website stores on a device, holding things like login details, language settings or browsing behaviour. The rules also cover tracking pixels, local storage and device fingerprinting scripts. If it identifies a visitor or tracks what they do, treat it like a cookie. The four types of cookies Type Examples Consent needed? Strictly necessary Shopping basket, secure login, forms No, but list them in your policy Preferences Language, regio...
Post a Comment
Read more

How to Choose CPRA Training Software: 6 Steps for Small and Mid-Sized Businesses

Image
  You've been asked to sort out CPRA training, you don't have a legal background, and the vendor pages start to blur together. This plan takes you from "where do I start?" to a tool you can trust, in six steps. Quick answer: CPRA training software is an online tool that teaches staff California's privacy rules, tests what they learned and keeps records that prove it. The right one gives each team its own lessons, keeps its content current and produces reports an auditor will accept. Step 1: List everyone who answers privacy questions California's training rule is aimed at the people who handle consumer questions about your privacy practices. Before you look at any software, write down who that is in your business. Think beyond the privacy team: whoever reads the support inbox and live chat, sales staff who talk to customers, HR, IT staff who delete data, and marketing staff who run email lists. Step 2: Decide what each role must learn One course for ever...
Post a Comment
Read more

Do Analytics Cookies Still Need Consent in the UK? What Changed in 2027

Image
  If you run a UK website, you may have heard that analytics cookies no longer need consent. That is partly right. The change is real, but it comes with conditions, and it does not cover advertising. What changed The Data (Use and Access) Act 2025 amended the UK's cookie rules in the Privacy and Electronic Communications Regulations (PECR). The relevant section came into force on 5 February 2026, and the ICO published its final guidance on storage and access technologies on 29 April 2026. Two new exceptions let you set some cookies without asking first: Statistical purposes: cookies used only to understand how people use your site so you can improve it. Appearance and functionality: cookies that adapt how the site looks or works to the visitor's preferences, such as remembering a chosen language. The conditions For both exceptions, the ICO says you must give clear and comprehensive information about the purpose and offer a simple, free way to object. If someone...
Post a Comment
Read more

What Makes Cookie Consent Valid? Six Checks for Your Banner

  Many websites show a cookie banner and assume the job is done. Yet if the consent behind your analytics and ad data doesn't meet the legal standard, the data built on it becomes hard to rely on, and your reports rest on choices that don't count. What valid consent means Under the GDPR, consent has to be freely given, specific, informed and unambiguous, shown through a clear affirmative act. Recital 32 adds that "Silence, pre-ticked boxes or inactivity should not therefore constitute consent." In January 2023, the European Data Protection Board published a report from its cookie banner taskforce. It sets out shared positions that EU regulators use when they handle complaints. Six of them make a useful checklist for any website owner. Six checks for your banner 1. Reject sits on the same layer as Accept. A majority of authorities in the taskforce said a layer with an accept button and no reject option does not meet the requirements for valid consent. 2. Every b...
Post a Comment
Read more

What Does the Facebook Pixel Collect, and When Does It Need Permission?

  You added the Facebook pixel to see which ads bring sales. It's worth knowing what it actually sends to Meta, because that decides two things: how much your ads can learn, and when you need a visitor's permission first. What the pixel collects Meta lists five kinds of data the pixel can send: Browser details sent with each page request, such as the page being viewed Your pixel ID and the Facebook cookie that recognises the browser Button clicks , their labels and the pages they lead to Extra details you choose to send , like order value or product name Form field names , such as email or quantity If you switch on advanced matching, the pixel can also send details like email address and phone number. The pixel scrambles them into a code (a "hash") before sending. How Meta uses it for your ads Meta uses this data to measure which ads bring sales, to build retargeting lists of people who visited your site, and to find more people likely to buy. When you...
Post a Comment
Read more

How the IAB Transparency and Consent Framework Works, Step by Step

The IAB Transparency and Consent Framework (TCF) is a common standard that lets a website collect consent for advertising and share it with ad vendors in a format they all understand. IAB Europe built it with IAB Tech Lab, and the first version came out in 2018, the same year GDPR took effect. Why the framework exists GDPR asks for a lawful basis before personal data is used for things like ad targeting. One web page can call many ad tech companies in a single load, and before the TCF each one handled consent its own way. The framework gives them one shared signal to read. Seers breaks down each moving part in its beginner's guide to the IAB Transparency Consent Framework . How it works in four steps The banner appears. A certified consent management platform (CMP) shows the notice and the number of vendors asking for permission. The visitor chooses. They accept, reject, or pick specific purposes and vendors. The CMP writes a TC string. This short encoded record lists ap...
Post a Comment
Read more

What Happens Between a Website Visit and a Lead?

  A lot. Between a visit and a lead, your site can load analytics and ad tags, set cookies, log the source and device, recognise return visits and link all of it to a contact once a form is filled. Most of this starts on page load, before the visitor makes any consent choice. Here is how it works, stage by stage. Stage 1: The page loads Your tag manager reads its rules. Tags set to run on all pages start at once. Each request carries the page address, the referrer, the browser type and the visitor's IP address. Cookies may be set in the same moment. Stage 2: The visitor browses Analytics records page views, scroll depth, clicks, downloads and video plays. A heatmap or session recording tool may capture mouse moves and taps. None of this needs a name. Stage 3: The visitor leaves GA4 closes a session after 30 minutes without activity by default. Ad platforms may already have added the visit to a retargeting audience. The visitor gave no signal at any point. Stage 4: The visi...
Post a Comment
Location: United States
Read more

When Customer Data Exists but Your Marketing Still Has Gaps

Image
  Having customer data doesn't automatically mean your marketing has a complete picture. A business can collect website visits, product views, purchases, email activity, and CRM records every day. The harder part is making that information useful across the systems used for marketing. A common setup looks like this: Customer activity happens on the website Some information goes into the CRM Conversion data is sent to advertising platforms Analytics tools record another part of the journey Each tool has its own view of what happened. That can make simple questions harder to answer. Which customer actions actually led to a purchase? Which signals are available for campaign optimisation? Which information is being passed to external platforms? This is where first-party data has practical value. It comes directly from interactions with your own customers, so the business has a stronger basis for understanding behaviour instead of depending entirely on data reported by third-party platf...
Post a Comment
Location: United States
Read more

How to Control Tracking and User Consent on a Magento Store

A Magento store can have more tracking running in the background than you expect. You may have Google Analytics, advertising pixels, third-party extensions, or other scripts connected to the store. The important question is not just whether your store has a cookie banner. It is what actually happens before and after a shopper gives consent . Start with Magento's own cookie controls Adobe Commerce and Magento include Cookie Restriction Mode . When it is enabled, Magento restricts certain cookie-based data collection until the shopper gives consent. That gives you a starting point, but it does not mean every tracker added to your store is automatically covered. A Magento store can also use third-party extensions and external tracking tools. These need to be checked separately. Find out what is actually running The easiest way to start is to test your store before accepting cookies. Open your website in a private browser window and check: Which cookies are created? Which third-party r...
Post a Comment
Location: United States
Read more

Mobile CMP vs Web CMP: What’s the Difference and Do You Need Both?

Image
  If your business has a website and a mobile app, you may wonder: Do I really need a different CMP for my app? The short answer is that web and mobile apps need consent to work in their own environments. A setup made for your website does not automatically handle everything happening inside your app. Here is the simple difference. What is a Web CMP? A Web CMP manages consent on websites. It works with the browser and the tools running on your website. These can include analytics, advertising tags, and other services that collect or use visitor data. For example, a visitor may choose to allow analytics but reject advertising. Your consent setup can then pass those choices to the relevant website tools. This is why a web CMP is closely connected to your website's tags and browser environment. If you are looking for a web-based consent management setup, Seers supports websites and helps businesses manage visitor consent from one place. What is a Mobile CMP? A Mobile CMP manages co...
Post a Comment
Location: United States
Read more