Cookies Notice Template for Singapore

A Cookies Notice is a legal document that informs website visitors about how your website uses cookies and similar tracking technologies to collect and process their personal data. Under Singapore's Personal Data Protection Act (PDPA) 2012 and related guidelines, you must provide clear information about cookie usage and obtain appropriate consent from users when collecting their personal data through cookies.

When do you need this document?

You need a Cookies Notice if you operate a website that uses any type of cookies or tracking technologies that collect personal data from visitors. This includes e-commerce platforms, corporate websites, blogs, or any online service that tracks user behavior, stores preferences, or collects analytics data. The notice is particularly crucial if you use marketing cookies, social media plugins, or third-party analytics tools like Google Analytics. Even if your website only uses essential cookies for basic functionality, having a comprehensive notice demonstrates transparency and builds user trust. Singapore-based businesses and international companies serving Singapore users must comply with PDPA requirements regardless of where their servers are located.

Key legal considerations

Your Cookies Notice must clearly categorize different types of cookies used on your website, including necessary cookies for basic functionality, analytical cookies for performance monitoring, and marketing cookies for advertising purposes. The document should specify the duration cookies remain active, whether they are first-party or third-party cookies, and what specific data is collected. You must provide detailed information about the legal basis for processing personal data through cookies, whether it's legitimate interest, consent, or contractual necessity. The notice should include clear instructions for users to manage their cookie preferences, withdraw consent, or opt-out of non-essential cookies. Additionally, you must disclose any cross-border data transfers and ensure appropriate safeguards are in place when sharing cookie data with overseas service providers.

Legal requirements in Singapore

Under the PDPA 2012 and PDPC Guidelines Chapter 6, you must obtain informed consent before collecting personal data through non-essential cookies. The consent mechanism must be clear, specific, and allow users to make an informed choice about cookie acceptance. Your Cookies Notice must be easily accessible from every page of your website, typically through a prominent link in the footer or header. The Personal Data Protection Commission requires that cookie banners and notices use plain English and avoid legal jargon that ordinary users cannot understand. You must implement technical measures to ensure cookies are only activated after user consent is obtained, except for strictly necessary cookies required for website functionality. The notice must also comply with the PDPA's notification obligations, informing users about their rights to access, correct, or withdraw consent for their personal data collected through cookies.