FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Consent management

Civic Cookie Control

Essential

Civic Cookie Control is a consent management tool from Civic Computing, a UK company, that displays a cookie banner and lets visitors accept or reject categories of cookies. It blocks or allows scripts according to those choices and records them. It stores the visitor's consent preferences in a cookie, which is strictly necessary and does not itself require consent.

Block Civic Cookie Control until consentScan my site
Overview

What does Civic Cookie Control do?

Civic Cookie Control, often shortened to Cookie Control, is the consent management solution developed by Civic UK Ltd in London. Launched in 2009 as one of the first commercial cookie banners on the British market, it is now used by thousands of public sector and private organisations, including UK local councils, NHS trusts and universities. The service is operated entirely from the United Kingdom.

What Civic Cookie Control does

Cookie Control loads a small JavaScript widget on each page of your website. It displays a configurable consent banner with granular categories (necessary, functional, statistics, marketing), blocks third party scripts until consent is given, exposes a persistent preferences icon that lets visitors withdraw or modify their choices at any time, and writes a proof of consent record. Configuration is handled through a dedicated dashboard hosted at cookiecontrol.civicuk.com.

Data and cookies set

Civic Cookie Control stores the visitor's consent decision in a first party cookie called CookieControl (90 days) and may also use localStorage when configured for cookieless persistence. The optional cloud logging service keeps a record of consent that includes a hashed identifier, timestamp, banner version and selected categories. No tracking pixel, no behavioural data and no advertising identifier is set by Cookie Control itself.

GDPR, UK GDPR and ePrivacy implications

A CMP is considered strictly necessary technology under Recital 30 of the ePrivacy Directive and benefits from the consent exemption of Art. 5(3) ePrivacy and Reg. 6(4) PECR in the United Kingdom. Cookie Control can be configured to comply with the strictest implementations: equally weighted accept and reject buttons, granular categories, easy withdrawal, no pre ticked boxes, evidence of consent. It supports Google Consent Mode v2 and the IAB Transparency and Consent Framework version 2.2.

Data transfers and hosting

Civic UK Ltd is established in London and processes all visitor data within the United Kingdom on Microsoft Azure UK regions (London and Cardiff). Consent records remain in the UK and are not transferred to the United States or any other third country. The UK is currently subject to a European Commission adequacy decision under Art. 45 GDPR, so transfers from the EU to a UK based CMP do not require additional safeguards such as Standard Contractual Clauses.

Practical compliance steps

Run a cookie scan on your website to inventory third party tags. Map each tag to a Cookie Control category. Configure the banner with equally weighted accept and reject buttons and a granular preference panel. Enable consent logging. Connect the CMP to Google Consent Mode v2 if you use Google services. Document Civic UK as a processor in your records of processing and your privacy notice. Audit the configuration monthly and after every theme or plugin change.

Compliance

Civic Cookie Control and the GDPR

Legal basis
Legitimate interest (Art. 6(1)(f) GDPR and equivalent UK GDPR provision): a Consent Management Platform is strictly necessary technology for compliance with Art. 7 GDPR, Art. 5(3) ePrivacy Directive and PECR. No prior consent is required to load the CMP itself.
Risk level
low
Applicable regulations
UK GDPR, EU GDPR, PECR, ePrivacy Directive, TDDDG (Germany), LSSI CE (Spain), CCPA/CPRA, IAB TCF 2.2, Google Consent Mode v2
Cookies and trackers

What Civic Cookie Control sets and contacts

Tracking method
JavaScript snippet loaded on the website. Civic Cookie Control renders a consent banner and stores the visitor preferences locally in the browser (cookie or localStorage). Optional integration with Google Consent Mode v2 and IAB TCF 2.2.
Server location
Civic UK Ltd, hosted on Microsoft Azure data centres in the United Kingdom (London and Cardiff regions).
Cookieless mode available
Yes

Cookies set (3)

NameTypeDurationPurpose
CookieControlfirst_party90 daysStores the visitor consent preferences (accepted and refused categories) for the Civic Cookie Control banner.
ccShowCookieIconfirst_partySessionDetermines whether the persistent preferences icon should be displayed on the current page.
CookieControlPrefsfirst_party90 daysStores granular per category preferences when the CMP is configured with detailed categories.

Third-party domains contacted (3)

  • civicuk.com
  • cookiecontrol.civicuk.com
  • cc.cdn.civiccomputing.com
Questions

Frequently asked questions about Civic Cookie Control

Can't find your question? Write to us, we answer fast.

Which cookies does Civic Cookie Control set?

Civic Cookie Control writes a single first party cookie called CookieControl with a 90 day duration. It records the categories that the visitor has accepted or refused. When the cookieless option is enabled, the same information is stored in browser localStorage instead. No third party cookie is set by Cookie Control.

Is consent required to load Civic Cookie Control?

No. A Consent Management Platform is considered strictly necessary technology under Recital 30 of the ePrivacy Directive and Regulation 6(4) of PECR in the UK. Cookie Control therefore relies on legitimate interest and does not itself require prior consent, provided it only blocks scripts and stores the consent record.

What is the legal basis for processing?

The legal basis is legitimate interest under Art. 6(1)(f) UK GDPR and EU GDPR. Civic UK Ltd processes the limited data needed to comply with the legal obligation to collect consent under Art. 7 GDPR and Art. 5(3) ePrivacy. Visitors can object via the persistent preferences icon at any time.

Is data transferred to the United States?

No. All visitor data is processed within the United Kingdom on Microsoft Azure UK regions (London and Cardiff). Civic UK Ltd does not transfer personal data of website visitors to the United States or to any other country outside the UK and the EEA.

Do I need a DPIA for Civic Cookie Control?

A standalone DPIA is generally not required because the CMP is a privacy enhancing technology. It must however be documented in your records of processing (Art. 30 GDPR) and in the data processing assessment of the wider website. If you combine Cookie Control with high risk tracking, the DPIA applies to those trackers, not to the CMP itself.

How do I implement Civic Cookie Control correctly?

Install the JavaScript snippet on every page before any other tag. Run a cookie scan, classify each tag in a category, configure equally weighted accept and reject buttons, enable consent logging, connect Google Consent Mode v2 if needed, and add the persistent preferences icon. Re audit the configuration monthly.

Which alternatives to Civic Cookie Control should I consider?

Alternatives include Complianz (Netherlands), Cookiebot by Usercentrics (Denmark), Klaro (Germany), Didomi (France), Axeptio (France), OneTrust (United States) and the open source Klaro. The choice depends on hosting location, regulatory scope and the CMS in use.

How do I update the cookie policy when Civic Cookie Control changes?

Whenever the cookie scan detects a new cookie, update the cookie table in your privacy notice with the cookie name, purpose, duration and category. Re publish the consent banner version to invalidate previously stored consents that no longer cover the new processing.

Same category

More services: Consent management

See the whole category

Shopify Consent Management

Shopify Consent Management is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Shopify Consent Management manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Shopify Consent Management ensures worldwide privacy compliance.

Essential

KIProtect

Kiprotect is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Kiprotect supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Kiprotect ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Essential

Secure Privacy

Secure Privacy is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Secure Privacy manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Secure Privacy ensures worldwide privacy compliance.

Essential

AdFixus

AdFixus is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. AdFixus supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, AdFixus ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Essential

Tramoce

Tramoce is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Tramoce supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Tramoce ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Essential

Pandectes

Pandectes is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Pandectes integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Pandectes helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site