GDPR Website Checklist for UK and EU Businesses
If your website serves visitors in the UK or EU, data protection rules apply to how you collect and use their information. This checklist covers the technical basics. It is not legal advice, so confirm specifics with your adviser.
Cookies and consent
- Load non-essential cookies and trackers only after consent
- Offer equally easy “accept” and “reject” choices
- Let visitors change their choice later
Privacy policy
- Explain what you collect, why, how long you keep it and who you share it with
- Describe visitors’ rights and how to exercise them
- Link it from every page and every form
Forms
- Collect only what you need
- Use HTTPS and secure storage
- Separate marketing consent from enquiry submission
Analytics and embeds
- Configure analytics with consent mode or privacy-friendly settings
- Self-host fonts where possible
- Use privacy-enhanced or click-to-load embeds for videos and maps
Country specifics
Germany expects an Impressum page, the UK uses UK GDPR and PECR, and Switzerland has its revised Federal Act on Data Protection. See our pages for Germany, the UK and Switzerland.
Our websites include consent tools, privacy pages and secure forms as standard. Get a free quote.
