How to capture visitor source with GTM, if they have agreed to privacy policy (GDPR)

Question

I have a website in the UK that needs to comply with GDPR, so we ask for consent (via a standard banner with an \'accept\' button) before we run scripts like GTM.

Many of