Data protection
GDPR-ready websites, explained.
Most small business websites collect some personal data, even if it’s only a name and email from a contact form. Here’s what that means for your site, and how we handle it.
What a compliant small business website needs
There’s no single GDPR certificate for websites. Compliance comes from getting a handful of practical things right, and every site we build covers them.
1. A privacy notice that fits your business
Your privacy notice tells visitors who you are, what personal data your website collects, why, who it’s shared with, how long you keep it and what rights they have. It should describe what your site actually does, so a template copied from another business doesn’t do the job.
We write yours in plain English, based on how your site and your business actually work, and link it from every page.
2. Cookies only with consent
Under Irish law, you need someone’s consent before setting cookies that aren’t strictly necessary, such as analytics or advertising cookies. The Data Protection Commission expects rejecting cookies to be as easy as accepting them, and doesn’t accept pre-ticked boxes.
Our default is simpler: no cookies and no tracking at all, so there’s nothing to consent to and no banner in your visitors’ way. If you do want visitor statistics or embedded content, we add a proper consent banner and list everything in your privacy notice.
3. Forms that ask only for what’s needed
GDPR’s data minimisation principle means collecting only what you need. For most contact forms, that’s a name, a way to reply and a message. Each form links to your privacy notice, and nothing is pre-ticked.
4. Secure hosting
Every site runs over HTTPS, so information sent through it is encrypted in transit. We host on established infrastructure and keep the setup simple, which leaves fewer things to go wrong.
5. Knowing who else touches the data
Your hosting provider, email provider and any booking or form service all process personal data on your behalf. We list them in your privacy notice and point you to their data protection terms.
Your part. Your business is responsible for the personal data your customers give you. We set your website up properly, but answering requests from customers, such as someone asking for a copy of their data, stays with you. We’ll show you what to do if it happens.
This page is general information, not legal advice. For questions about your own obligations, see the Data Protection Commission website.
Get started
See your new homepage before you spend a cent.
Send us a short email about your business and we’ll put together a free demo of your homepage.
Useful to include
- Your business name
- What you do
- Your town
- Your current website or Facebook page, if you have one
We’ll only use your details to reply and prepare your demo. See the privacy notice.