FlourivateHelp Center

Set up your cookie banner and handle data requests

Last reviewed October 21, 2026

Turn on a cookie consent banner if you serve visitors in the EU or UK, and know where to export or delete a client's data when they ask.

When you're done, your website shows a cookie banner (if you need one), and you know how to respond when a client asks for a copy of their data or asks you to delete it.

These are tools, not legal advice

The banner and privacy tools help you manage consent and requests. They don't make you compliant on their own. If you're unsure what applies to your practice, check with your own adviser.

Before you start

  • Time: 10 minutes for the banner.
  • You need: a published privacy policy page and its full address, starting https://.
  • Decide if you need a banner. The setting itself says to turn it on only if you serve visitors in the EU, UK or other places that require GDPR-style cookie consent.

Everything here is under Settings > GDPR & Compliance (in Governance & Audit). It applies only to the workspace you're in.

  1. Go to Settings > GDPR & Compliance. The Cookie Settings tab opens first.
  2. Switch on Enable cookie consent banner.
  3. Choose a Banner Position: Bottom, Top or Corner.
  4. Type your wording in Custom Banner Text, or keep the suggested text.
  5. Paste your Privacy Policy URL.
  6. Click Save Cookie Settings at the bottom of the card.

Your tracking waits for consent

With the banner on, marketing and analytics scripts (Meta Pixel, Google Analytics, Google Ads, TikTok and similar) don't run until a visitor clicks Accept all. Your visitor and ad numbers will drop. That's expected.

Step 2: Respond to a data request

When a client asks for their data or asks you to delete it:

  1. Open the contact in Contacts.
  2. Find their Consent area (Consent Status).
  3. Click Export Data to download a copy for them, or Delete Data to remove their personal details.
  4. Check Settings > GDPR & Compliance > Compliance Logs. The export or deletion is listed there.

Deleting can't be undone

Delete Data anonymizes the contact. Their name and details are gone for good. Export first if you might need a record.

The other tabs, briefly

Tab What it's for
Consent Management Contacts with consent on record. Consent is saved when someone submits a form that has consent fields.
Data Requests Requests logged for contacts. You act on them from the contact's Consent area.
Consent Requests Double opt-in emails and whether they were confirmed.
Retention Rules How many days each type of data is kept before it's deleted automatically.
Compliance Logs A permanent record of consent changes, exports and deletions. It can't be edited.

Retention Rules delete data automatically

0 means "never auto-delete". Any other number turns on automatic deletion for that type of data, like old email messages or form submissions. Leave these at their current values unless you've decided on a policy. Invoices and payment records are kept regardless.

Check it worked

  • Open your website in a private browser window. The banner appears where you chose.
  • Reload Cookie Settings. The switch is still on and your text and link are saved.

If something's off

  • No banner on your site: check the switch is on and that you clicked Save Cookie Settings. There's no preview on the settings page, so always check the live site.
  • The privacy link doesn't work: use the full address, starting https://.
  • Consent Management is empty: your forms don't have consent fields yet, or nobody has submitted them.
  • There's no GDPR & Compliance card: your role doesn't include it. See Why a page or setting is missing.

Related