GDPR and UK DPA 2018 website compliance checker

What the checker looks at

Many small business privacy policies are copied from a template and never revisited, so they miss things UK GDPR expects them to say. The checker finds your privacy policy, reads it, and looks for the common gaps.

• Lawful basis: whether you state the lawful basis for processing personal data (GDPR Article 6).
• Data subject rights: whether the rights of access, erasure, portability and rectification are covered.
• Retention: whether you specify how long personal data is kept.
• Cookies and consent: whether the policy describes a cookie consent mechanism.
• Children's data: whether protections for children's data are addressed.
• International transfers: whether transfers outside the UK and the safeguards used are described.
• Third parties, security, controller details and consent withdrawal: whether third-party sharing is disclosed, security measures are mentioned, the data controller and their contact details are present, and how to withdraw consent is explained.

What you get back

• A compliance score out of 100 (ten criteria, ten points each) you can track over time.
• Issues ranked critical or warning, each with a plain-language description.
• On Pro: the full list of issues with recommendations, an ICO risk assessment, scheduled automatic re-scans and a PDF report you can keep on file or send to a client.
• On Free: 3 scans a month with the top 3 critical issues.

Why check regularly rather than once

A privacy policy goes out of date when you add a new tool, a new form or a new supplier. Re-scanning on a schedule means you notice that drift, and you can alert on the compliance score the same way you alert on uptime.

Read our guide to the GDPR gaps most small business websites have, and our compliance check disclosures page for exactly how the check works and where it is limited.

Who it is for

• UK small businesses that want a quick, repeatable check of their privacy policy.
• Agencies that want to flag privacy gaps on client sites and hand over a branded PDF report using the white-label add-on.
• Anyone preparing for a customer or supplier questionnaire who needs a starting point.

What it does not do

Being clear about limits matters more than a longer feature list.

• It is not legal advice, and a high score does not mean you are compliant. Serious questions need a qualified adviser.
• It reviews what your published privacy policy says. It does not verify what your business or website actually does with personal data.
• It does not inspect which cookies or trackers your site actually sets. A cookie scan is planned but is not available yet.
• The analysis is AI-assisted, so results should be reviewed by a person before you act on them.

Pricing

Free: £0.00 per month. Monitor up to 3 endpoints, 3 days of history and 3 compliance scans per month.

Pro: £23.99 per month (launch price, normally £29.99). Monitor up to 20 endpoints, 3 months of history, unlimited compliance scans, PDF reports and monthly automatic re-scans.

White-label add-on for agencies: £19.00 per month on top of Pro, to put your own name and logo on alert emails and PDF compliance reports. See the full pricing page.

Frequently asked questions

Related

• Website monitoring overview
• Guide: website compliance monitoring
• Compliance check disclosures
• Pricing