A cookie banner is not a badge that says a website is professional. On a small plumbing site it can be one more thing between a worried customer and the phone number. But if the site uses non-essential cookies or similar tracking, it is not optional either.
The useful question is simple: what does the site put on a visitor’s phone or browser, and why? Once you know that, the answer is usually straightforward.
This is a practical UK guide, based on the ICO’s current cookie guidance. It applies across England, Scotland, Wales and Northern Ireland. It is not a substitute for legal advice on an unusual setup.
Start with what the website actually uses
Do not add a banner because another tradesman’s site has one. Ask whoever built the site to list every cookie, local-storage item and third-party script. A basic site with a contact form, an embedded font and no tracking may have a very different answer from a site running Google Analytics, Meta ads and a remarketing tag.
The ICO says the normal rule is to tell people about cookies, explain what they do, and get consent before storing them. There is an exception for technology that is strictly necessary to provide a service the visitor has asked for. A shopping basket is the usual example. Analytics and advertising are not automatically covered by that exception.
For a plumbing site, that normally gives three practical groups:
- Essential: security, a form session or remembering a cookie choice. These can be needed for the site to work.
- Analytics: tools that show which pages people visit or whether a contact form was opened. Check the exact tool; do not assume it is exempt just because the reports look anonymous.
- Marketing: ad pixels, remarketing and social-media tracking. These need the clearest scrutiny because they follow or target visitors beyond the immediate job of showing them a plumber’s site.
If the only tracking is genuinely cookieless and no non-essential information is stored or accessed on the visitor’s device, a cookie banner may not be needed. That does not remove the need to be honest about what the site collects through an enquiry form.
When you do need a banner, make saying no easy
The banner should appear before non-essential cookies or similar technology is set. It should explain the choices in plain English, offer an equally easy way to reject non-essential options, and let people change their mind later.
That means a big green “Accept all” button with a faint “manage settings” link hidden underneath is a poor setup. The ICO’s consent guidance uses equally prominent accept and reject options as its example.
For a plumber, the short version can be refreshingly ordinary:
We use essential technology to make this site work. With your permission, we also use analytics to see which pages are useful. You can accept analytics or continue with essential only.
The buttons and the wording are only the surface. Your developer still needs to stop the analytics or advertising code from loading until the customer has made that choice. A banner that says “we respect your choice” while the tracker has already run is no help.
A privacy notice is separate from the banner
A cookie choice is about technology on the device. A privacy notice explains what happens when someone gives you their details.
If a homeowner fills in “Jane Smith, 07123…, leaking ceiling in Bangor”, that is personal information. The ICO’s small-business guidance says the notice should cover your contact details, what data you collect, why you use it, the relevant lawful basis, who you share it with, how long you keep it, and people’s rights and complaint route.
Keep it near the form as well as in the footer. A one-line note such as “We will only use your details to reply to this enquiry. Read our privacy policy” gives people the information at the moment they are deciding whether to press send. The ICO says privacy information should be provided when you collect personal data.
That does not mean filling the form with legalese. A customer with water coming through the ceiling needs clear labels, only the fields you need, and a simple explanation of what happens next. Our guide to plumber contact forms on a phone covers that part of the journey.
Do a ten-minute check before paying for ads or a redesign
Open the site in a private browser window and work through this list:
- Can you see a phone number or contact route without fighting a pop-up?
- Does the banner appear only when the site has non-essential technology to ask about?
- Can you reject non-essential options as easily as accepting them?
- Do analytics and advertising scripts wait for that choice?
- Does the privacy notice say what happens to a customer’s enquiry, in words they can understand?
- Is the same approach used on landing pages created for Google or Facebook ads?
The last point is easy to miss. A paid ad page is still your website. Do not let a marketing agency add tracking there without checking the consent setup first.
Keep it proportionate
There is no prize for turning a small business site into a maze of pop-ups. A well-built plumbing website should make it easy to call, describe the job and understand what will happen to the information left behind. That plainness is part of trust, just like a real photo, clear services and genuine Google reviews.
If you are reviewing a site from scratch, start with the broader plumbing website essentials too. We build simple, clear sites with the contact journey and privacy basics considered from the start; see our packages or get in touch if you would like us to look at yours.