We have a template privacy policy, but nobody knows what the site actually collects
We audit forms, scripts and cookies (small files stored in the browser) on the live site. The policy is written for your real data flows, not copied from a template.
A website that meets GDPR: policies, consent and a record of processing
If you sell to or track visitors in the EU or UK, your site must collect data by the rules. We set up consent, write the policies and build your record of processing activities.
Quote and schedule after your brief
Who it's for
- Companies selling to the EU, UK or Canada from outside those markets
- Online stores shipping or taking payments across borders
- Sites running Google Ads or Meta Ads to European audiences
- Teams connecting a CRM, chatbot or AI agent to website forms
Problems we solve
We have a cookie banner, but analytics and pixels still fire before consent
We configure Google Consent Mode and Tag Manager so scripts wait for the visitor's choice. Then we check in the browser that nothing extra loads first.
An EU partner asked for our record of processing and a data processing agreement, and we have neither
We build the record under Article 30 GDPR: what data, why, where it is stored, how long. We also prepare a data processing agreement template.
Someone asks us to delete their data and we have no process
We write a simple procedure for data subject requests: who receives them, where to search, and the response deadline. A request form goes on the site.
What's included
- Audit of forms, scripts, cookies and third-party services
- Privacy policy based on your real processes
- Cookie policy listing each cookie
- Consent banner with a one-click reject option
- Google Consent Mode and Tag Manager setup
- Form consents: separate checkboxes, with date and wording stored
- Record of processing activities (Article 30 GDPR)
- List of processors and a data processing agreement template
- Procedure for access and deletion requests
- All files and access handed over to you
Choose the scope
Use a package to describe what you need. We agree on the quote and schedule after reviewing your brief and requirements.
01
Start
A landing page or small site with a few forms
- Site audit
- Privacy and cookie policies
- Consent banner
- Form consents
02
Standard
A corporate site or store running ads and analytics
- Everything in Start
- Consent Mode and Tag Manager
- Record of processing
- Processor list and agreement template
03
Full
A company using a CRM, chatbots or AI agents with EU customer data
- Everything in Standard
- Data subject request procedure
- Risk review of AI tools and CRM
- Staff guide
- Post-launch check
How we work
Brief and requirements
You describe the task and current workflow. We clarify requirements, choose a first stage and prepare a quote.
Audit
We scan the site: forms, scripts, cookies, integrations. You get a list of the data you actually collect.
Documents and setup
We write the policies, install the banner and configure Consent Mode. We build the record of processing.
Testing
We test in the browser: what loads before consent, how rejection works, whether consents are stored.
Handover
You get the documents, access and a short guide. All accounts and files are yours under the agreed terms.
Scope and limits
- We are not a law firm and give no legal guarantees. For complex cases we recommend a lawyer's review.
- We do not promise protection from fines or audits. We reduce risk and put your data practices in order.
- We do not act as your DPO (data protection officer) or take over your day-to-day compliance duties.
FAQ
Does GDPR apply to a company outside the EU?
Yes, if you offer goods or services to people in the EU or monitor their behavior on your site. Where your company is registered is not the deciding factor. If you only serve other markets, other laws may apply instead.
What do I need to provide?
Access to the site, Tag Manager and analytics, plus a list of services that receive data (CRM, email, ads). We also need your company contact details for the policy. We find the rest during the audit.
Is a cookie banner enough?
No. The banner is one part. You also need a policy, proper form consents, a record of processing and a way to answer requests from people.
Will I get documents I can edit?
Yes. We hand over documents in editable formats, and the service accounts belong to you. You can update them yourself or with another vendor.
How is the price set?
We prepare a quote after reviewing your brief and requirements. A first stage can cover: site audit; Privacy and cookie policies. Scope, payment and schedule are agreed before work starts.
Can we start with a pilot?
Yes. We can start with a site audit and a fixed consent banner. The KPI is simple: no unnecessary script fires before consent, and the consent is stored. You can verify it in the browser.
Start with your task
Describe your business, the outcome you need and your current workflow. We will clarify the requirements and prepare a quote after your brief.