Documents
Writing an accurate small business privacy notice
A privacy notice should describe what your business actually does with personal data, not what a template assumes.
Read guide →Practical resources
Compliance and accessibility guides
Short explanations that clarify requirements, testing limits and routine work for website owners.
Documents
What a cookie banner can and cannot do
A cookie banner is only one part of a working consent system.
Read guide →Accessibility
Why automated WCAG testing is not enough
Automated checks are useful but cannot replace people using the site.
Read guide →Planning
How to maintain a cookie and tracker inventory
A useful inventory connects each observed technology to its owner and purpose.
Read guide →Requests
How individuals can make a data deletion request
A clear request helps an organization identify the data and applicable rights.
Read guide →Requests
Setting up a privacy rights request workflow
Businesses need a controlled way to receive, verify, assign and answer requests.
Read guide →Planning
Building an actionable data retention schedule
A retention schedule turns vague promises into ownership and deletion processes.
Read guide →Security
Content Security Policy when running ad scripts
Security headers should reduce risks without silently breaking legitimate website features.
Read guide →Accessibility
Understanding text contrast and WCAG thresholds
Foreground and background contrast ratios are one part of readable user interfaces.
Read guide →Planning
Managing vendors and data processing agreements
A vendor list supports risk management only when tied to actual data sharing and contracts.
Read guide →Accessibility
Accessible forms beyond visible labels
Form usability combines semantics, instructions and forgiving interaction.
Read guide →Planning
A practical compliance roadmap for a new website
A small website can start with a manageable inventory before investing in complex software.
Read guide →Cookie consent
Implementing consent-based script loading
How to make optional tags inert until permission and test browser network requests.
Read guide →Cookie consent
Why withdrawal needs vendor cleanup
Understand what reloading can and cannot do after a visitor changes cookie preferences.
Read guide →