GDPR guides for UK businesses

eCommerce sites collect more personal data than almost any other type of website. This guide explains exactly what your WooCommerce or online store Privacy Policy must include under GDPR, CCPA, and UK law.

Cookie consent banners are legally required under EU GDPR and the ePrivacy Directive — but most businesses get them wrong. This guide explains what valid consent looks like and how to implement it correctly.

CCPA is no longer the only US state privacy law. Virginia, Texas, Colorado, Connecticut and more have passed their own laws — here's what each requires and how to comply with all of them.

EU GDPR fines can reach €20 million or 4% of global turnover. This guide explains the two tiers of fines, real examples, and the practical steps that reduce your risk.

Every website serving EU visitors must have a GDPR-compliant Privacy Policy. This guide explains exactly what the EU GDPR requires, who it applies to, and what your policy must include.

A Terms of Service protects your business by setting the rules for how your website or app can be used. Here's what it covers and whether you need one.

Free privacy policy generators seem convenient — but most produce generic templates that won't pass regulatory scrutiny. Here's what they miss and what you should do instead.

Both Apple App Store and Google Play require a Privacy Policy for any app that collects personal data. Here's exactly what you need and what must be in it.

CCPA and GDPR are the two most important privacy laws for US and UK businesses. Here's how they differ and what each requires from your business.

SaaS products collect far more personal data than most founders realise. Here's exactly what your Privacy Policy must include — and why generic templates won't cut it.

Running a Shopify store? You're collecting customer data with every order — here's exactly what privacy documents you need and what they must include.

If your website uses Google Analytics, you're collecting personal data — and privacy laws require you to disclose it. Here's what you need to do to stay compliant.

Most websites need both a Privacy Policy and Terms & Conditions — but they're very different documents. Here's what each one does and why you need both.

A plain-English guide to the California Consumer Privacy Act (CCPA) and CPRA for small business owners — what it requires, who it applies to, and how to comply.

Find out whether your US website legally needs a Privacy Policy under CCPA, CPRA, and other state laws — and what happens if you don't have one.

A Data Processing Agreement (DPA) is a legal contract required by UK GDPR Article 28 when you share personal data with third-party processors. Here's everything you need to know.

A complete, plain-English guide to UK GDPR for small businesses in 2026. What you need to do, what documents you need, and how to stay compliant without expensive lawyers.

The six lawful bases for processing personal data under UK GDPR — explained in plain English for small business owners, with guidance on which one to choose.

Everything UK small businesses need to know about Cookie Policies — what they are, when you need one, and what must be included under UK law.

Find out whether your UK website legally requires a Privacy Policy under the UK GDPR and Data Protection Act 2018 — and what happens if you don't have one.