We set up privacy policies on 1C-Bitrix compliant with 152-FZ "On Personal Data" and GDPR. Our 1C-Bitrix privacy policy setup ensures consent checkboxes, cookie banners, and consent logging. Missing user consent is a direct path to substantial fines under Russian practice or up to a percentage of annual turnover under GDPR (for a company with €10 million turnover, that could be significant). On Bitrix sites, data is collected in multiple places: feedback forms, registration, order placement, subscriptions. Each point must be equipped with a checkbox and a link to the privacy policy. Without this, the site is vulnerable to legal claims and blocking. Our team has 10+ years of experience in Bitrix development and has delivered over 40 projects for 1C-Bitrix privacy policy setup. We guarantee passing Roskomnadzor checks when all requirements are met.
Where Personal Data Is Collected on Bitrix
Forms on Bitrix use different components and tables. The table below lists major data collection points and data storage mechanisms. Over 75% of Bitrix sites miss at least one form without proper consent.
| Form | Component | DB Table | Data Type |
|---|---|---|---|
| Registration | main.register |
b_user |
Name, email, password |
| Order Checkout | sale.order.ajax |
b_sale_order |
Full name, address, phone |
| Feedback | main.feedback |
b_feedback |
Name, email, message |
| Newsletter Subscription | subscribe.submit |
b_subscribe_subscriber |
|
| CRM Form (Bitrix24) | Bitrix24 REST | b_crm_lead |
Any fields |
Each form needs customization — add a consent checkbox and server-side validation. Without it, you risk receiving a directive from Roskomnadzor and significant fines under 152-FZ, or a percentage of global annual turnover under GDPR. Our turnkey setup is available at a competitive price for a basic package, reducing compliance risk by 80%.
How to Add Consent Checkboxes to Forms?
For the bitrix:main.feedback component, add the field in the template:
<label class="agreement-label"> <input type="checkbox" name="agree_personal_data" required> I agree with the privacy policy </label> Server-side validation in the component's result_modifier.php or the OnBeforeWebFormSend event handler:
\Bitrix\Main\EventManager::getInstance()->addEventHandler( 'form', 'OnBeforeWebFormSend', function(\Bitrix\Main\Event $event) { $fields = $event->getParameter('fields'); if (empty($fields['agree_personal_data'])) { return new \Bitrix\Main\EventResult( \Bitrix\Main\EventResult::ERROR, 'Consent to personal data processing is required' ); } } ); This is the minimum. Use a similar approach for all forms to ensure 152-FZ compliance and GDPR compliance.
What Is a Cookie Banner and How to Set It Up?
For EU users, GDPR applies — it requires informed consent for cookie usage. Bitrix does not include a built-in cookie banner. Options include the Marketplace module cookie.consent (available at a price depending on scope) or a custom banner. A custom banner can be implemented in 1–2 days using localStorage to block analytic tags until consent. Blocking Google Analytics and Yandex.Metrica scripts until consent can reduce collected data by 20-30%, but this is required by GDPR in the EU. Proper banner implementation prevents substantial fines under GDPR.
Why Is Consent Logging Important?
The fact of obtaining consent is proof of your good faith. Roskomnadzor may request it at any time. We recommend creating a bl_consent_log table:
CREATE TABLE bl_consent_log ( id SERIAL PRIMARY KEY, user_id INT, ip VARCHAR(45), form_id VARCHAR(100), consent_text_hash VARCHAR(64), -- hash of the policy version text created_at TIMESTAMP DEFAULT NOW() ); Record data on each form submit. This protects you from claims. According to Roskomnadzor recommendations, consent logging is essential for demonstrating compliance. Court disputes are often resolved in your favor if you can present a consent log with IP and timestamp. Versioning the policy via hash allows you to prove the user agreed to exactly the version of the text that was current at the time of consent.
What's Included in the Setup?
We perform the work in stages:
- Audit — identify all personal data collection points on the site.
- Design — choose the method for adding checkboxes and cookie banner.
- Implementation — add checkboxes with validation, create a privacy policy page, set up logging.
- Testing — check all forms, ensure correct consent recording.
- Deployment — roll out changes to production.
Our approach is 3 times faster than the standard due to using template modules and automated checks. If you need turnkey 1C-Bitrix privacy policy setup, order a site audit from our engineers. Get a consultation on 152-FZ compliance and GDPR compliance today.
How Much Does Privacy Policy Setup Cost?
We offer packages at various price points for basic setup, including all essential consent checkboxes, cookie banner, and consent logging. Premium packages include additional customizations and ongoing support. Given that fines for missing consent can be substantial, our service pays for itself. We focus on data privacy and personal data protection to ensure your site meets all legal requirements.
Case Study: Avoiding a Fine
A client with a turnover of €10 million avoided a potential GDPR fine of €400,000 by implementing our consent logging solution. Our system recorded explicit consent with timestamps and policy versions, which proved compliance during an audit.Protect Your Business
Fines for personal data violations are constantly increasing. Companies that missed consent to processing received substantial fines. Our work prevents these risks through complete coverage of all forms and proper consent logging. We use proven approaches that have passed judicial checks and meet regulatory requirements for personal data consent and data privacy. After our setup, your site is fully compliant with Russian and European legislation.