You need actual consent in order to store personal data. I don't think the UK GDPR differs yet from the EU one, so the ICO guide might still be useful. I find

You need actual consent in order to store personal data. I don't think the UK GDPR differs yet from the EU one, so the ICO guide might still be useful. I find it much clearer than guidance I can find from the EU: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/ https://ico.org.uk/for-organisations/guide-to-data-protectio...