Home / Policies / Consent Policy

Policies

Consent Policy

A Consent Policy sets out when and how you may collect permission for marketing, forms, cookies and other user actions. It helps South African businesses keep records that are clear, lawful and easy to apply across websites and customer touchpoints.

Consent Policy

What the Consent Policy Covers

This policy is used when your business needs a clear framework for asking permission before sending marketing, collecting optional details, using tracking tools, or storing user preferences. It is especially useful for websites that take enquiries, quote requests, newsletter sign-ups, booking forms, or ecommerce checkouts, where consent must be specific and easy to prove later.

For many Cape Town and national businesses, the tricky part is not asking for consent, but asking for it in the right way. The policy sets out what users are agreeing to, how they can withdraw consent, and which records should be kept. That matters whether you trade from Gardens, serve clients in Bellville or Stellenbosch, or support customers across South Africa.

Sizes, Formats and Consent Scope Options

The Consent Policy can be set up as a single-page policy for a basic site, or as part of a fuller compliance pack where consent wording is linked to privacy notices, cookie notices and marketing preferences. Some businesses only need one general consent framework, while others need separate wording for lead forms, newsletters, account creation and promotional messages.

  • Basic consent framework: suitable for brochure sites, service enquiries and simple forms
  • Expanded policy pack: better for ecommerce, subscriptions and multi-step onboarding
  • Campaign-specific wording: useful for events, webinars and seasonal promotions
  • Cross-channel consent records: for website, SMS, message and call-back requests

Choice of scope depends on how your business collects permission. A cleaning company in Claremont, a professional practice in Cape Town CBD, and an online store shipping nationwide may all need different consent wording, even if the core legal idea is the same. The policy can be tailored so it does not overstate permission or leave gaps in your records.

Where It Suits Best

This product suits businesses that rely on forms, sign-ups, booking requests or repeat customer communication. It works well for service businesses, subscription models, membership sites, ecommerce shops and organisations with more than one point of contact. If your team uses lead forms from the website, collects opt-ins at events, or stores preferences for future contact, a consent policy keeps the process consistent.

It is also useful where more than one person handles compliance. Smaller teams often need a clear internal guide, while larger organisations need a document that staff can follow without guessing. For businesses in Sea Point, Paarl, or the Cape Town CBD, it helps keep the rules the same across branches and departments, which reduces confusion when new campaigns go live.

  • Businesses using marketing messages or SMS campaigns
  • Sites with booking forms, quote requests or call-back forms
  • Subscription services and member portals
  • Ecommerce stores that need consent records tied to checkout steps

Setup, Technical Fit and What You Need in Place

The Consent Policy itself does not need power, gas, or physical installation. What it does need is a proper fit with your website forms, consent tick boxes, tracking tools and internal record-keeping. If your site is hosted online and your forms are already live, the policy can usually be aligned with those existing touchpoints without major interruption to your day-to-day work.

Before ordering, check how your website currently asks for permission. Look at whether your forms use pre-ticked boxes, whether marketing consent is bundled into a general terms checkbox, and whether your team stores proof of opt-in. If tracking or remarketing tools are active, those should be matched to the policy wording too. We often see businesses needing a small clean-up here, and it is easier to sort before a launch than after complaints start coming in.

  • Confirm which forms collect consent and which only collect contact details
  • Check whether marketing consent is separate from service consent
  • Review how opt-ins and withdrawals are stored
  • Make sure your staff know who updates wording when campaigns change

Care, Reviews and Ongoing Servicing

Consent rules should be reviewed when your site changes, your product range grows, or your marketing channels expand. A policy that worked for a small launch site may no longer suit a subscription model or a new booking flow. Ongoing servicing usually means checking forms, updating wording after process changes, and making sure older records are still stored properly.

For businesses dealing with seasonal campaigns, platform updates or staff changes, regular review is worth the effort. If your team adds a new newsletter route or changes how cookie preferences are captured, the policy should be updated at the same time. That keeps the wording practical and reduces the risk of mismatched messaging. In our view, it is better to tidy it once than patch it three times later.

What to Check Before You Order

Before you request a Consent Policy, confirm the main ways your business interacts with customers. That includes your website forms, message tools, tracking setup, subscription flows and any offline sign-up process that feeds into your database. The more clearly you describe your process, the more accurate the consent wording will be.

  • Business type and customer journey
  • Whether you use message, SMS, phone or in-app marketing
  • What forms you have and where they sit on the site
  • Whether you need separate wording for adults, children or members
  • Any existing privacy notices or terms that must align
  • Who in your team will manage future updates

When businesses order from Gardens, Bellville or beyond, the biggest advantage is getting the consent approach right from the start. That avoids awkward rewrites later and keeps the documentation easy for staff to use, even when the office is busy and someone needs answers quickly.

How TsAndCs Supports the Document

TsAndCs helps businesses build a consent framework that fits their actual operations, not just a generic template. The support can include policy pack customisation, compliance review, privacy gap analysis, POPIA alignment, PAIA support, ecommerce policy setup, booking site documents, subscription policy support, platform terms drafting, policy updates, launch readiness checks and ongoing compliance support.

Clients reach us through the enquiry form on our contact page, and we use the details provided to shape the wording around your forms, channels and internal process. That gives you a practical document that can be applied across one site or across multiple locations, without making the team dig through legalese every time a consent question comes up.

Key facts

Document typeConsent policy for marketing, forms, tracking and lawful permissions
Best forWebsites, subscription services, ecommerce, booking systems and lead forms
FormatSingle policy or part of a broader compliance pack
Scope optionsBasic, expanded, campaign-specific or multi-channel consent wording
Compliance focusPOPIA-aligned consent handling and record keeping
Support areaGardens, Cape Town CBD, Sea Point, Claremont, Bellville, Stellenbosch, Paarl and nationwide

What our Website Compliance customers say

Verified Google reviews

Questions we get asked

Is a Consent Policy the same as a Privacy Policy?

No. A Privacy Policy explains how personal information is handled, while a Consent Policy explains when permission is needed and how it is recorded or withdrawn.

Do I need separate consent wording for marketing and service messages?

Often, yes. Service messages may be needed to deliver the service, while marketing permission usually needs to be separate and clearly explained.

Can one policy cover website forms and SMS campaigns?

Yes, if it is set up to cover the channels you actually use and the consent records are managed consistently across each one.

Planning something? Send the team a message.

Contact form