Privacy & Consent in Avada
Last Update: May 18, 2026
Avada takes privacy and consent seriously, and provides a range of tools to help you inform your users about third party embeds and cookies, and give them control over their consent choices. So, whether you have a simple website with no cookies over the neccesary WordPress ones, or you have a lor of third party services and need to be compliant with regulatory frameworks such as the GDPR or the CCPA, we have you covered.
Read on to understand the layers of privacy control Avada offers, and watch the video below for a full visual runthrough of the options available.
Privacy & Consent Global Options
Privacy in Avada starts with the Global Options > Privacy & Consent tab. It is here you configure your privacy and consent options, depending on your specific needs. So, basically, how it works, is that you configure your Privacy Consent Tools options in the Global Options > Privacy Consent Tools sections, and then you use the Privacy & Consent Bar, and/or the Privacy & Consent Element to display the privacy options to the site visitor.
By default, privacy and consent options are turned off in Avada, and you will only see an Important Note, and three options: Google & Font Awesome Fonts Mode, Privacy Consent Tools & Privacy & Consent Bar, as you can see below.
The first of these options is the Google & Font Awesome Mode. When set to “Local”, the Google and Font Awesome fonts set in Global Options will be downloaded to your server, which complies with GDPR guidelines. Alternatively, you can set the options to “CDN” to use the Google and FontAwesome CDNs.
So, depending on your website, your location and your users’ locations, you may be required to adhere to legal privacy frameworks such as the GDPR or the CCPA etc. Pleae consult a lawyer to determine your specific legal requirements. Once you understand your obligations, you can then enable the Privacy Consent Tools, or also the Privacy & Consent Bar, to implement your website Privacy policy.
See each of those documents for a full rundown on these Global Option > Privacy & Consent sections, but in this overview doc, let’s start with why consent may be needed.
User Control Over Third Party Embeds
Avada offers a variety of elements that help you to utilize third-party content, like YouTube and Vimeo videos, Google Maps, Facebook and Twitter timeline, Flickr images, SoundCloud files, etc. While all of these third party services enrich your websites, they also collect data about your users. IP addresses, location data or user activity tracking, to name a few.
Under the GDPR, or example, it is necessary to ask visitors for their explicit consent if data should be passed along to third parties. While that is generally not possible to achieve directly with embeds, on the other hand, similar to Google fonts, you don’t want to lose these services on your site. The Privacy Consent Tools can help with this.
Third Party Embeds
One example of the Consent Tools is to prevent embeds from loading until user consent is granted to ensure GDP compliance. For any of the third party services that are deselected by the visitor, the embeds will not be loaded on page load. Instead your users will see a placeholder graphic, with custom text on it and a button to accept this third party service. The background color and text color for that placeholder can be set in Global Options.
Below is an example of the YouTube Element on a page, requiring consent:
In the above example you will see the following text:
WordPress 4.9.6 and up comes with a series of Privacy Options for you to manage customer data and the option to designate a dedicated privacy policy page for your website. For the Avada embed overlay text to include this dedicated page, you need to enable this in the WordPress Dashboard > Settings > Privacy section
What is the GDPR?
The General Data Protection Regulation (GDPR) is Europe’s framework for data protection laws, replacing the 1995 data protection directive. It is designed so that website owners can be more transparent in how they collect, use, and share personal data. Likewise, it also provides individuals access and choice when it comes to how their own personal data is collected, used, and shared. The GDPR came into effect in May, 2018.
There is no single, comprehensive federal privacy law in the U.S. equivalent to the EU’s GDPR. Instead, the U.S. relies on a patchwork of state-level laws, with the California Consumer Privacy Act (CCPA/CPRA) serving as the closest equivalent.
Is Avada GDPR Compliant?
What needs to be compliant is the end user website, not the software/framework a website is built on. The Avada Website Builder as an entity does not violate GDPR criteria because it does not collect any data. What we as a team have done, is to give our Avada userbase the necessary tools to ensure that their websites are GDPR compliant. These new privacy tools and options were introduced in Avada 5.5.2, released on May 22nd, 2018.
Is WordPress GDPR compliant?
An article about GDPR Compliance Tools in WordPress was posted on WordPress.org shedding light on the new privacy features that WordPress added to its 4.9.6 release, which shipped on May 17, 2018.
The main features were new areas for handling data export and erasure requests, a new privacy policy page, and also a consent checkbox for the comments form.
Who Is Affected By GDPR?
In short, every company, organization and individual that are processing or controlling datasets of their customers or website visitors will be covered by GDPR. It affects any business that has customers who reside in the EU.
Other GDPR Compliance Options in Avada
Consent Field Element for Forms
In Avada Forms, you can find the flexible and useful Consent Field Element to add to your Forms any time you need to gather consent from your users.
Contact Form Consent Checkbox
If you are using a Legacy Contact Form, there are two options at Global Options >Contact Form, called Display Data Privacy Confirmation Box, and Data Privacy Checkbox Label to display a consent checkbox on the contact form page. The label can be easily customized in Global Options to reflect your needs.
User Register Element Registration Notice
In the User Register Element, there is a setting to show custom text before the submit if you want to inform a new user about GDPR compliance. View the custom registration notice message field for the user registration element below.
Next Step: Configure Privacy Consent Tools Options
As mentioned at the start, if you have a really simple website, you might just want to enable the Privacy & Consent Bar, and display that to your visitors to let them know of your cookie usage.
Alternatively, if you enable the Privacy Consent Tools, you can fully configure your Privacy & Consent options and then use any combination of the Privacy & Consent Bar, or the Privacy & Consent Element to display your cookie information to your visitiors and allow them to select their privacy preferences.
