Issue No. 01 / April 2026United Kingdom

Home Verified permalink · Latest public audit

goodenergy.co.uk

UK compliance audit.

Scan complete

12

Compliance Score

How the score was calculated

Starting score: 100
2 critical findings: −50
1 critical warning: −12
1 high finding: −15
1 medium finding: −5
3 low findings: −6
Final score: 12

AI Analysis

Your website’s consent mechanism is not working as intended: tracking scripts began firing before users could give or refuse consent, with eight tracking requests from four different providers detected before any option was available. The cookie banner lacks essential features, including a clear ‘accept’ or ‘reject’ button, and its content fails to explain cookie purposes in a way that meets legal requirements. While the banner’s design avoids some common pitfalls, the mismatch between its functionality and the tracking activity means users may be monitored without being asked first, which could lead to enforcement action.

Fix these first

3 priorities

01
CRITICALcheck_pre_consent_trackers
Site fired 8 tracker request(s) from 4 provider(s) before any consent option was offered: Amplitude, Google Analytics, Google Tag Manager, Google AdSense
02
CRITICALfind_reject_button_fullpage
No 'reject' button found on the page
03
HIGHwcag_aa_scan
Found 1 accessibility violation(s): 0 critical, 1 serious, 0 moderate, 0 minor

Report Details

Playbook: UK Cookie Compliance
Domain: goodenergy.co.uk
Started At: 1 Sept 2026, 14:49
Duration: 6m 11s
Total Checks: 38
Report ID: aJE6qYAH85eR

Check Results

Data Capture

3 checks All passed

capture_html_initial

INFO

Captured HTML (234357 bytes) from https://www.goodenergy.co.uk/

Captured HTML:

screenshot_initial

INFO

Screenshot captured

Screenshot Evidence:

Screenshot evidence for screenshot_initial

Click to view full size

capture_cookies_initial

INFO

Captured 9 cookies

Captured Cookies:

Pre-Consent Cookies

2 checks1 failed

check_initial_cookies

CRITICAL-12

Found 8 cookie(s) of undetermined purpose set before consent: [handl_landing_page handl_ip handl_url handl_url handl_ref handl_original_ref AMP_MKTG_604e978706 AMP_604e978706]. Their purpose could not be identified, so they may be essential — review them manually

handl_landing_page

handl_ip

handl_url

handl_url

handl_ref

handl_original_ref

AMP_MKTG_604e978706

AMP_604e978706

Non-Essential Cookies:

handl_landing_pageunknown29d

"Cookie purpose could not be determined from available information"

handl_ipunknown29d

"Cookie purpose could not be determined from available information"

handl_urlunknown29d

"Cookie purpose could not be determined from available information"

handl_urlunknown29d

"Cookie purpose could not be determined from available information"

handl_refunknown29d

"Cookie purpose could not be determined from available information"

handl_original_refunknown29d

"Cookie purpose could not be determined from available information"

AMP_MKTG_604e978706unknown12mo

"Cookie purpose could not be determined from available information"

AMP_604e978706unknown12mo

"Cookie purpose could not be determined from available information"

PECR Regulation 6(1)

Cookies (except strictly necessary) require user consent BEFORE being set

check_pre_consent_trackers

CRITICAL-25

Site fired 8 tracker request(s) from 4 provider(s) before any consent option was offered: Amplitude, Google Analytics, Google Tag Manager, Google AdSense

PECR Regulation 6(1) & UK GDPR Article 6

Loading third-party trackers (Google Analytics, Facebook Pixel, etc.) before consent is a PECR violation regardless of whether they set cookies

Cookie Consent Banner

6 checks1 failed

find_banner

INFO

Found consent banner via vision (height: 800px)

PECR Regulation 6(2)

Clear and comprehensive information must be provided about cookie use

find_cookie_banner

INFO

Cookie consent banner detected on page

verify_banner_visible

INFO

Element visibility is true as expected

screenshot_banner

INFO

Screenshot captured

Screenshot Evidence:

Screenshot evidence for screenshot_banner

Click to view full size

extract_banner_text

INFO

Extracted 1 words

check_banner_content

LOW-2

Cookie banner lacks adequate information - PECR requires clear explanation of cookie purposes

Content analysed: "<nil>"

PECR Regulation 6(2)(a)

Cookie notice must provide clear, comprehensive information about purposes

Cookie Controls

4 checks2 failed

find_reject_button_semantic

INFO

No 'reject' button found on the page

find_reject_button_fullpage

CRITICAL-25

No 'reject' button found on the page

ICO Cookie Guidance

Rejecting cookies must be as easy as accepting them - a visible reject button is required

find_accept_button_semantic

INFO

No 'accept' button found on the page

find_accept_button_fullpage

LOW-2

No 'accept' button found on the page

AI Dark Pattern Analysis

2 checks All passed

check_dark_patterns_vision

HIGH

No specific dark patterns identified in cookie banner

EDPB Guidelines 03/2022 on Dark Patterns

Visual deceptive patterns including color manipulation and hidden controls are prohibited

check_deceptive_buttons

HIGH

Button labels are clear and not deceptive

EDPB Guidelines 03/2022 on Dark Patterns

Button labels must accurately reflect their function without ambiguity or deception

AI Content Analysis

3 checks2 failed

check_banner_quality_llm

MEDIUM-5

Banner content is not GDPR compliant; Low clarity score: 0/10; Low completeness score: 0/10

Cookie banner does not meet GDPR compliance requirements

Banner text is unclear or uses complex legal jargon that average users cannot easily understand

Cookie banner provides virtually no information about data collection and processing. GDPR Article 13 requires that users be informed about: (1) the identity of the data controller, (2) purposes of processing, (3) legal basis for processing, (4) data retention periods, (5) user rights including the right to withdraw consent, and (6) any third-party data sharing. This banner fails to communicate these essential elements.

Specifically missing: cookie purposes (analytics, advertising, etc.), third-party data sharing information, user rights to withdraw consent. Under GDPR, failing to disclose this information means users cannot give truly informed consent.

Banner Text Analyzed:

"Cookies from Good Energy To make our website work, we save some essential small files (cookies) on your computer. With your permission, we would also like to save some extra cookies that help us improve how people find out about Good Energy. If you’d like to change your preferences, you can do so at any time by clicking Cookie Preferences in the footer. Read more about the cookies we use in our Cookie Policy. Allow all extra cookies Reject all extra cookies Manage preferences related to coo..."

PECR Regulation 6(2)(a)

Cookie notices must provide clear, comprehensive information about purposes

check_language_consistency

LOW-2

Language mismatch: page is but banner is

Cookie banner language () does not match the website's primary language (). GDPR Article 12 requires that privacy information be provided in clear, plain language that is easily accessible and understandable to the user. Displaying a cookie consent banner in a different language than the website content may prevent users from understanding what they are consenting to, potentially invalidating the consent.

PECR Regulation 6(2)(a)

Information must be provided in a language users can understand

check_cookie_purposes

MEDIUM

No cookies available for purpose matching

PECR Regulation 6(2)(a)

All cookies used must be disclosed and explained in the notice

AI Accessibility Analysis

1 check All passed

check_visual_accessibility

MEDIUM

Banner meets visual accessibility standards (score: 90/100)

None found

Equality Act 2010

Cookie banners must be accessible to users with disabilities including visual impairments

Accessibility

1 check1 failed

wcag_aa_scan

HIGH-15

Found 1 accessibility violation(s): 0 critical, 1 serious, 0 moderate, 0 minor

Serious accessibility issue: Links must have discernible text. This violation affects users who rely on assistive technologies. 5 element(s) affected.

Website has 0 critical and 1 serious WCAG AA violations that significantly impact users with disabilities. These issues may prevent screen reader users, keyboard-only users, or users with visual impairments from accessing the cookie consent interface.

Accessibility Issues:

Links must have discernible textserious5 elements

Ensures links have discernible text

Affected elements :

<a href="https://www.goodenergy.co.uk/products/solar-panels/"><span class="g-card__arrow-button g-button g-button--down"></span></a>

<a href="https://join.goodenergy.co.uk/"><span class="g-card__arrow-button g-button g-button--down"></span></a><a href="https://www.goodenergy.co.uk/powerhouse"><span class="g-card__arrow-button g-button g-button--down"></span></a>

<a href="https://www.goodenergy.co.uk/products/heat-pumps/"><span class="g-card__arrow-button g-button g-button--down"></span></a>

<a href="https://www.goodenergy.co.uk/support/categories/home-movers/"> </a>

Public Sector Bodies Accessibility Regulations 2018, Equality Act 2010

UK websites must meet WCAG 2.1 Level AA standards; failure may constitute disability discrimination

Report Generation

2 checks All passed

generate_summary

INFO

AI summary generated successfully

generate_pdf

INFO

PDF report generated: https://smesolutions.uk/artifacts/artifacts/fe70d7ff-196f-4cc5-baf3-131fc2493b37/report.pdf

Full Compliance Report

Loading PDF viewer...