BonpreuEsclat – Grocery Retail
Consent-First Tracking
with OneTrust
“We run several services across many sites and apps, and we needed consent to be consistent and compliant everywhere, without losing the data we rely on to measure and advertise.”
THE CHALLENGE
BonpreuEsclat operates a broad digital ecosystem covering grocery, loyalty, energy and mobility, spread across multiple websites and native apps. OneTrust was already live on some properties, missing on others and configured differently from one domain to the next.
This fragmentation created an inconsistent consent experience, the risk of analytics and advertising tags firing before consent was given, and unreliable consent signals that left media reporting incomplete and biased, all while the setup had to satisfy GDPR, the Spanish AEPD and the DMA, and respect iOS rules on how tracking is described in-app.
DISCIPLINES
Consent Management, Privacy & Compliance, Web & App Tracking, Server-Side Tagging
OUR APPROACH
One consent standard,
every property
Uptimal began by auditing every existing OneTrust deployment across BonpreuEsclat’s websites and apps, cataloguing 56 issues (from trackers firing before consent and hard-coded tags that bypassed the CMP, to missing app consent layers and inconsistent geolocation rules), and verifying Consent Mode v1 and v2 behaviour across Google and non-Google tags.
From there we deployed a single, standardised OneTrust CMP across the whole ecosystem: cookie and SDK discovery and classification, a banner and preference centre localised in Catalan and Spanish with geolocation rules, plus auto-blocking and CSP allowlists to stop tag piggybacking. We wired OneTrust into Google Tag Manager with Consent Mode v2 so every Google and non-Google tag adapts to user choice, and extended consent beyond cookies through Universal Consent & Preferences (UCP) integrated with Salesforce, giving the business one reliable consent record across web, app and CRM.
-
Consent Audit & Standards
We audited the existing OneTrust setup across every web domain and app, documenting 56 deficiencies by severity and owner (tags firing before consent, hard-coded gtags, missing app CMP and geolocation gaps), and verified Consent Mode v1 and v2 to define a single standard configuration. -
OneTrust Deployment
We rolled out and standardised OneTrust on every property: cookie and SDK scanning and classification, a Catalan and Spanish banner and preference centre with geolocation rules, plus auto-blocking and CSP allowlists to stop third-party piggybacking and guarantee zero tracking before consent. -
Consent Mode v2 & CAPI
We connected OneTrust to GTM and deployed Google Consent Mode v2 for Google and non-Google tags, recovering modelled conversions from users who decline. Consented signals are routed server-side to Meta CAPI, Google Ads Enhanced Conversions, TikTok and GMP, and aligned with the Salesforce-based UCP record.
“BonpreuEsclat runs many
services across web and app,
so the hard part was never
OneTrust itself. It was
making consent consistent
everywhere and wiring it
so the business keeps
every signal it’s allowed to
keep, fully compliant and
fully measurable.”
Senior Data Engineer
RESULTS
Goals accomplished!
BonpreuEsclat now runs on a single, standardised consent layer across its entire web and app ecosystem. Tracking is fully opt-in and compliant with GDPR, the AEPD and the DMA, the consent experience is consistent in Catalan and Spanish, and Consent Mode v2 plus server-side media APIs keep analytics and advertising signal flowing even when users decline cookies.
56
consent and tracking issues identified and fixed across the web and app ecosystem
100%
of analytics and media tags now governed by user consent, with nothing firing before opt-in
10+
web and app properties unified under one consent standard with Consent Mode v2, recovering signal for Google, Meta and other media
consent and tracking issues identified and fixed across the web and app ecosystem
of analytics and media tags now governed by user consent, with nothing firing before opt-in
web and app properties unified under one consent standard with Consent Mode v2, recovering signal for Google, Meta and other media
Get in touch
Questions? A project in mind? Talk to us.
- Analytics, tracking or data questions: real humans answer, fast
- Enterprise: audits, sGTM, GA4 360, BigQuery and MMM engagements
- Tell us your stack and goals, we reply within one business day