Who we help
For employers, online businesses and service providers collecting or sharing customer, staff or supplier information.
What the service can include
- Website, customer and employee privacy notices
- Internal data protection policies and responsibilities
- Controller and processor provisions in commercial contracts
- Review of collection, sharing, retention and international transfer wording
The scope is agreed for your matter. It depends on the documents, the issues and what you ask us to do.
How the work usually progresses
Map the information
We ask what information you collect, why it is used and which suppliers receive it.
Review the gaps
We assess existing notices, policies and relevant contracts.
Prepare usable documents
We draft or update the agreed wording and identify operational points for your team.
What to prepare
- Current privacy notices and policies
- A list of personal information and its uses
- Details of hosting, CRM, payroll and other suppliers
- Retention arrangements and any international sharing
Fees and the first consultation
The initial consultation is £325 + VAT. Further work is separately scoped and priced. We will explain the charging basis and any expected third-party costs before you instruct us.
Questions about data protection policies
Can I copy another business’s privacy notice?
A notice should explain your own processing. Copying a different business’s wording risks describing practices and suppliers that do not apply to you.
Does a policy alone make a business compliant?
No. Documents need to match the way information is handled. We identify practical implementation questions as part of the agreed review; any wider audit must be separately scoped.