Who is it for?

If your business uses any personal information about your customers, you need to tell them what information you’re holding and why, along with a few other pieces of mandatory information. For some activities you may also need to ask for their consent. That doesn’t mean having pages of small print; the very opposite, in fact. Data Privacy law requires you to make your privacy policy or notice not only comprehensive but also clear, honest and understandable. This is the service for you if your business: • Does not have a privacy policy on its website (or, where applicable, offline) • Has a privacy policy that isn’t very user-friendly • Has a privacy policy that hasn’t been updated to meet the requirements of GDPR What is included? • Initial discussion to confirm scope and timings • Review of any existing policy and any other relevant documents you may have • Discussion with key members of staff, as applicable • Advice on legal technicalities, such as which legal basis you should use for processing personal data (if you have not already established this) and whether consent is required for any of your activities. • Creation of a policy in line with your brand and house style (if you have one) • If applicable, a version of the new policy suitable for offline use • If applicable, cookie notice for use on your website • 2 rounds of revision to all documentation produced • Advice on placement and/or distribution of your new privacy policy, including advice on obtaining consents if applicable • Any e-mail/phone calls needed while work is under way • A final wrap-up call • 10% discount on any further services bought within 3 months of completion

What is not included?

• Mileage if applicable • Translation into languages other than English • Production of any documents not specified above • Revision of any existing documents

What will I have at the end of it?

• A clear, user-friendly and GDPR compliant policy for use online, plus an offline version if applicable • A cookie policy if applicable • Clear advice on how to distribute or make public your new policy • Recommendations on obtaining consent, where applicable, for any activities • If applicable, recommendations on related issues that need to be addressed which come up in the course of the work (such as processes for managing customer rights requests)