The ICO state:
"You must tell people if you set cookies, and clearly explain what the cookies do and why. You must also get the user’s consent and consent must be actively and clearly given.
Users should be able to disable cookies, and you should make this easy to do."
You are allowed essential cookies, but not non-essential (3rd Party) cookies.
Ecomus GDPR Cookie Extension for Magento 1 allows for 3rd party cookies to be disabled while keeping essential cookies running.
https://www.ecomus.co.uk/gdpr-cookie-extension
Cookies: The ICO state:
"You must tell people if you set cookies, and clearly explain what the cookies do and why. You must also get the user’s consent and consent must be actively and clearly given.
Users should be able to disable cookies, and you should make this easy to do."
You are allowed essential cookies, but not non-essential (3rd Party) cookies. Google Analytics are 3rd party cookies and not essential to the fulfilment of an order. Therefore you need consent and if consent is not given then they should be disabled.
Ecomus GDPR Cookie Extension for Magento 1 allows for 3rd party cookies to be disabled while keeping essential cookies running.
https://www.ecomus.co.uk/gdpr-cookie-extension
thanks @sherrie . . . any specific timing would be more than welcome as next friday GDPR comes into force; honestly, I'd prefer not to install 3rd party modules for that purpose...
@baghulia The product changes mentioned will not be before the 25th. We've provided the data mappings for that timeline.
Thank you for this. This was great help!