GDPR basics for a small business website
Practical privacy questions to consider when a small business collects enquiries or analytics data online.
Collect less
Only ask for information that is actually needed. A contact form rarely needs a date of birth, postal address and ten mandatory fields.
Explain the purpose
Tell visitors what data is collected, why it is used, how long it is kept and how they can exercise their rights. Privacy information should be understandable, not decorative legal fog.
Think about third parties
Analytics, embedded media, fonts, spam protection and form providers can all involve external services. Know what the site loads and why.
Security is part of privacy
Use HTTPS, sensible access controls, updates, backups and retention limits. For legal questions specific to your situation, use official guidance or qualified legal advice.
Want to apply this to your business?
Start with the free automation diagnostic or describe your situation.