Service 01
Privacy & compliance for e‑commerce.
UK GDPR and RODO, made operational. Not a binder of policies — the consent, cookies, forms and records that decide whether a store can be trusted and defended.
What this covers
Six areas, in the order they cause trouble.
Consent
Banners and preferences that meet the standard for freely given, specific and recorded consent — with Reject as easy as Accept.
Cookies
A full inventory of what sets what, why, and for how long — plus a policy that matches reality rather than a template.
Privacy policies
Written for the way your store actually works: payment providers, fulfilment, analytics, marketing tools.
Checkout & forms
Every field you ask for is a privacy decision. We audit what is collected, why, and what can be dropped.
Records & documentation
Records of processing, DPIAs, processor agreements — the paperwork an authority asks for first.
Regulator contact
Practical support if the ICO or another authority asks a question.
How we work
Four steps, no theatre.
Review
We look at the store the way a visitor and a regulator both would: what loads, what is asked for, what is promised.
Prioritise
Everything wrong is not everything urgent. We rank by legal exposure and commercial impact.
Fix
We implement or specify the changes — banner, policies, forms, tracking — and hand over the record of what was done.
Maintain
Compliance drifts as the store changes. We build in a review rhythm instead of a one-off clean-up.
The commercial argument
A consent wall costs you orders. A defensible one does not.
Most stores are stuck between two bad options: a banner that annoys customers into leaving, or a setup that would not survive a complaint. We build the third option — compliant by design, and measured against your own analytics rather than a hunch.
- We read your funnel before we change your banner.
- Every recommendation comes with the trade-off stated.
- You keep the evidence: what changed, when, and why.
- Format
- Remote, working directly with the store team.
- First deliverable
- A prioritised findings list — legal exposure and commercial impact side by side.
- Handover
- Changes implemented or specified, plus the documentation to support them.
Next step