UK GDPR Website Checklist for Small Businesses
UK GDPR applies to any website collecting personal data — including a simple contact form. Here's what to check.
The Basics
- A clear, accessible Privacy Policy
- A Cookie Policy plus a working consent banner (PECR)
- Forms that only collect data you actually need
- An SSL certificate on every page (HTTPS)
- A documented process for handling data access/deletion requests
Common Mistakes
The most common issue we see is analytics cookies firing before consent is given, or a Privacy Policy that doesn't match what the site actually does with visitor data. Both are easy to fix once identified.
Not Sure If You're Compliant?
Our free website audit includes a basic review of security and compliance indicators — a useful starting point if you're unsure. For a deeper technical review, see our security assessment service, or our maintenance & security service if you need this handled on an ongoing basis.
Not Sure Where to Start?
Get a free, no-obligation review of your website's performance, SEO and basic security indicators.
Free Website & Security Audit