Privacy-Compliant Tracking
Measurement that works within consent rules rather than around them: consent handled properly, data minimised, and modelling used for what consent removes.
Overview
Analytics and privacy law now interact directly. If tags fire before consent, the data is unlawfully collected regardless of how useful it is. If consent is requested badly, rejection rates climb and a large share of behaviour becomes invisible. Both outcomes are common and both are fixable.
The work is making the compliant path also the well-measured one: a consent banner that is lawful and not adversarial, tags that genuinely wait, modelling to fill the gap consent leaves, and data retention that is deliberate rather than default.
Who this is for
- Companies whose tags fire before consent is given
- Businesses operating across markets with different consent rules
- Teams whose data fell sharply after a consent platform was installed
How we approach privacy-compliant tracking
The specific pieces of work a typical engagement covers. Scope is agreed up front — nothing here is a surprise line item later.
Consent platform implementation
A consent management platform configured so tags genuinely wait, which is frequently not the case even where a banner exists.
Consent mode and modelling
Signalling consent state to platforms so they can model the gap, recovering a meaningful share of what rejection removes.
Banner design
Lawful and non-adversarial. Dark patterns raise consent rates temporarily and are increasingly enforced against.
Data minimisation
Collecting what you use and no more, which reduces both legal exposure and the amount of data you have to defend.
Retention and deletion
Retention periods set deliberately, with deletion actually happening rather than being described in a policy.
Cross-market configuration
Different rules by jurisdiction handled properly, rather than applying the strictest rule everywhere and losing data unnecessarily.
From first call to measured result
The same sequence every time, so you always know what happens next.
Assess
What fires before consent, what is collected, how long it is kept, and where the legal exposure actually is.
Configure
Implement the consent platform and connect it to tags properly, then verify with the tags disabled.
Recover
Consent mode, modelling and server-side collection to reduce the measurement loss consent introduces.
Document
Record what is collected, why, and for how long, so the position can be defended without reconstruction.
Outcomes, not deliverables
A pile of artefacts isn't progress. These are the changes the work is meant to produce — and what we report against.
A defensible position
Documented, correctly implemented consent removes a category of risk that is increasingly enforced.
Less data lost to consent
Consent mode and modelling recover a meaningful share of what a naive implementation simply loses.
Consent rates that hold up
A clear, honest banner performs better than an adversarial one once trust is accounted for.
Less data to defend
Minimisation and real deletion reduce the surface of any future incident or request.
Common questions about Privacy-Compliant Tracking
The things people ask before they get in touch. If yours is not here, ask us directly.
How much data do we lose to consent rejection?
It varies enormously by market and audience, and by how the banner is presented. Consent mode with modelling recovers a substantial part of it for platform reporting. The honest position is that some visibility is gone permanently and measurement approaches have to account for that.
Can we make the banner harder to reject?
No, and increasingly it is enforced against. Reject must be as easy as accept in most jurisdictions. Beyond legality, adversarial banners damage trust in a way that is hard to see in the analytics and real in the business.
Do we need a consent banner at all?
If you set non-essential cookies or process personal data for advertising, yes, in most jurisdictions. Some privacy-first analytics tools genuinely avoid the requirement by not using cookies or personal identifiers, which is worth considering if advertising integration is not critical.
Is this legal advice?
No. We implement measurement that follows the requirements as we understand them and document what is collected, and we would expect your legal counsel to review the position. We will tell you plainly when something is a question for them.
Thinking about Privacy-Compliant Tracking?
Tell us what you are trying to change. If we are not the right fit we will say so, and point you somewhere better.
Looking at the wider picture?
Privacy-Compliant Tracking usually sits alongside other work in Data, Analytics & Measurement. Browse the full area to see what it connects to.