For UK small businesses

Website compliance built around the regulations that actually apply to you.

A solicitor and a garage face completely different legal obligations. We identify your sector, scan your site against the specific Acts and regulations that apply, and deliver a compliance pack grounded in the legislation your business is actually subject to. From £49.

Check your website free

Free compliance report · Sector-specific analysis · No obligation

45%
No ICO complaint right
Retention periods missing
Cookie consent insufficient
Company number missing
Contact info displayed
45+
Acts of Parliament
35
sector & activity rule sets
4
tailored documents
24hrs
turnaround time

Check your website for free

Enter your website and email below. We'll scan your site against UK regulations and email you a free compliance report within 5 minutes — no obligation, no payment details required.

What we check

Your website sits at the intersection of multiple UK laws — we check against all of them

🔒

Privacy policy

14 required sections checked against 27 specific GDPR articles: controller identity, purposes, legal basis, recipients, retention periods, individual rights, ICO complaint right, international transfers and more.

UK GDPR Art 12–22 · DPA 2018
🍪

Cookie consent & PECR

Cookie banner present and compliant, reject button equally prominent, analytics exemption correctly applied under the Data Use and Access Act 2025, tracker disclosure.

PECR Reg.6 · DUA 2025
🛒

Terms & conditions

Cancellation rights, complaints procedure, liability limitations, ADR provider disclosure, and — for online sellers — Consumer Contracts Regulations distance selling requirements including the 14-day cooling-off period.

CRA 2015 · CCR 2013 · ADR Regs 2015

Accessibility statement

Presence and content of accessibility statement, WCAG 2.2 Level AA commitment, Equality Act reasonable adjustment duty, and contact information for reporting accessibility issues.

Equality Act 2010 · WCAG 2.2
🏢

Company information

Registration number, registered address, place of registration, and VAT number displayed on the website as required by law.

Companies Act 2006 s.82 · ECR 2002
⚖️

Sector-specific obligations

SRA transparency rules for solicitors, AML record-keeping for estate agents, Gas Safe registration for plumbers, Ofsted requirements for nurseries, allergen disclosure for restaurants, and 15+ other sector-specific regulatory checks.

25+ regulatory bodies · 21 sectors

Your compliance pack includes four tailored documents

📋
Privacy Policy Customised for your sector, data types and third-party tools
📜
Terms & Conditions Sector-specific clauses with correct regulatory references
🍪
Cookie Policy Mapped to your actual trackers, DUA 2025 compliant
Accessibility Statement Equality Act 2010 and WCAG 2.2 Level AA

Not a template. A compliance engine.

Every business has a different regulatory landscape. We map yours and build accordingly.

We identify your sector, the tools you use, and the regulations that apply — then assemble a compliance pack from 230+ regulation-and-article combinations, selecting only the clauses your specific business is required to have. Here's what that looks like for three very different businesses:

⚖️

High street solicitor

SRA-regulated · AML-supervised · 15-year retention
UK GDPR PECR Companies Act SRA Standards & Transparency Rules Money Laundering Regs 2017 Proceeds of Crime Act Legal professional privilege Legal Ombudsman complaints 15-year document retention
🔧

Gas engineer

Gas Safe registered · CDM obligations · 40-year retention
UK GDPR PECR Companies Act Gas Safety Regulations 1998 CDM Regulations 2015 Control of Asbestos Regs — 40yr retention COSHH 2002 exposure records Building Regulations Part J & P CIS subcontractor verification
🧒

Nursery

Ofsted-registered · Children's data · 25-year retention
UK GDPR PECR UK GDPR Art 8 — children's consent Childcare Act 2006 Children Act 1989 — safeguarding EYFS Statutory Framework ICO Age Appropriate Design Code Special category data (health, SEN) 25-year retention for children's records

We currently cover 21 sector-specific rule sets spanning legal, financial, healthcare, education, automotive, hospitality, charities, recruitment, accountancy, age-restricted retail, construction, architecture, pest control, retail, tanning, fitness, IT services, transport, veterinary, nurseries, and pet services — plus 7 behavioural overlays that activate based on what your business does.

🏴󠁧󠁢󠁳󠁣󠁴󠁿

Jurisdiction-aware across the UK

Scottish solicitor? You get the Law Society of Scotland and the Solicitors (Scotland) Act 1980 — not the SRA. Northern Irish charity? You get the Charity Commission for Northern Ireland and the Charities Act (NI) 2008. We maintain 12 jurisdiction-specific variants covering England & Wales, Scotland, and Northern Ireland with the correct regulators, limitation periods, and safeguarding legislation for each.

We also detect what you do

Sector isn't the whole picture. We scan for specific activities on your site and layer on the additional obligations they trigger.

🛒

Online selling

Stripe, PayPal or cart detected? Distance selling and cancellation clauses added.

📧

Email marketing

Mailchimp, newsletter signup found? PECR soft opt-in and consent rules included.

🏥

Health & sensitive data

Health forms, DBS checks, biometrics? Article 9 special category protections applied.

🌍

International transfers

Google Fonts, US-hosted tools detected? UK IDTA and Data Bridge safeguards included.

👥

Staff & recruitment

Careers page or job listings? Employment data handling and HMRC PAYE obligations added.

📹

CCTV & surveillance

Physical premises with cameras? Surveillance Camera Code and ICO CCTV guidance applied.

📱

Social media tracking

Facebook Pixel, TikTok, LinkedIn tracking? Social media data sharing clauses included.

🔗

Multiple overlays

A gym with e-commerce and marketing gets fitness, distance selling, and PECR clauses — all in one pack.

How it works

From your website to a tailored compliance pack in 24 hours

1

We scan your site against the law

Our scanner identifies your sector, detects 90+ third-party tools (Stripe, Mailchimp, Google Analytics, HubSpot and more), checks your existing policies, and maps exactly which of 45+ Acts of Parliament and sector-specific regulations apply to your business.

2

You see exactly what applies

Your scored compliance report shows which requirements are met, which are missing, and why — with references to the specific regulations, articles, and sections relevant to your sector. Not a generic checklist; a sector-specific legal analysis.

3

We deliver your pack

Within 24 hours you receive four documents assembled from 230+ regulation combinations — with the right sector clauses, the correct statutory citations, jurisdiction-appropriate regulators, and retention periods calculated for your specific industry.

Simple pricing

Choose one-time fix or year-round protection

Fix + Monitor

£99/year less than £9/month
  • Everything in Quick Fix
  • Monthly compliance checks
  • Instant alerts if issues found
  • Free fixes all year
  • Regulation change updates
  • Priority support
Get started

Pay securely with Stripe. We'll review your site and email you the report within 24 hours.

Questions & answers

What compliance obligations does my website have?

If your website collects any personal data — contact forms, email signups, analytics, cookies — you're subject to multiple overlapping laws. The UK GDPR and Data Protection Act 2018 govern how you handle personal data. PECR governs cookies and electronic marketing. The Consumer Rights Act 2015 shapes your terms and conditions. The Companies Act requires your registration details on the website. The Equality Act 2010 covers accessibility. And depending on your sector, you may also be subject to industry-specific rules — AML regulations for solicitors and estate agents, Gas Safety Regulations for heating engineers, the Childcare Act for nurseries, or the Licensing Act for pubs and off-licences. The exact combination is unique to your business.

Is this something I need to worry about as a small business?

Compliance obligations apply regardless of size — a sole trader plumber has the same GDPR transparency duties as a large firm. The practical risk scales with how much personal data you handle, but every business website needs at minimum a privacy policy, cookie information, and company details displayed correctly. Getting it right from the start is much easier than responding to a complaint later.

Why can't I just use a free template?

A free template doesn't know what your business actually does. It won't include 40-year asbestos record retention for a builder, AML provisions and tipping-off carve-outs for a solicitor, or Natasha's Law allergen handling for a restaurant. It won't know you use Stripe and Mailchimp, or that Google Analytics transfers data to the US under the UK-US Data Bridge. And it won't layer e-commerce distance selling clauses on top of your sector obligations just because you also sell online. We detect all of this automatically and assemble documents that reflect the actual legal position of your specific business — drawing on 45+ Acts of Parliament and 230+ specific regulation-and-article combinations.

What do I actually receive?

A five-tab compliance pack. Tab one is a Compliance Summary explaining which regulations apply to your business and why — so you understand the reasoning, not just the documents. Then: a privacy policy with sector-specific clauses and correct retention periods for your industry, terms and conditions with the regulatory references your sector requires, a cookie policy mapped to the actual trackers detected on your site, and an accessibility statement. All as HTML you can paste into your site, plus a how-to guide.

How long does it take?

We deliver within 24 hours of payment, usually much faster. Updating your website takes 10–15 minutes — just copy and paste.

What regulations do you check against?

Our system references 45+ Acts of Parliament and 230+ specific regulation-and-article combinations. The core framework covers the UK GDPR, Data Protection Act 2018, PECR, Data Use and Access Act 2025, Consumer Rights Act 2015, Consumer Contracts Regulations 2013, Equality Act 2010, Companies Act 2006, and E-Commerce Regulations 2002. On top of that, each sector triggers additional legislation — the Money Laundering Regulations 2017 for solicitors and accountants, the Childcare Act 2006 for nurseries, Gas Safety Regulations 1998 for heating engineers, the Veterinary Surgeons Act 1966 for vets, CDM Regulations 2015 for builders, and many more. We also reference guidance from 25+ regulatory bodies including the ICO, SRA, Ofsted, Gas Safe Register, RCVS, and DVSA.

How is this different from a solicitor doing it?

A solicitor will produce a more bespoke document and can give you legal advice — we can't. But for most small businesses, the cost of a solicitor-drafted compliance pack (typically £500–£2,000+) is disproportionate to the risk. Our documents are assembled from legally-reviewed content that cites the correct Acts, articles, and sections for your sector. They cover the obligations a business like yours is subject to under current UK law. For complex or high-risk situations — FCA-regulated firms, CQC-registered healthcare, gambling — we'll tell you that you need specialist advice and won't take your money.

Is this legal advice?

No. We provide compliance documents assembled from legally-reviewed, sector-specific content based on current UK legislation and ICO guidance — but this is not legal advice and we are not a law firm. For complex situations or legal disputes, you should consult a solicitor. For most small businesses, our documents cover everything you need to be compliant.

Compliance documents grounded in the law that applies to your business

45+ Acts of Parliament. 21 sectors. 3 jurisdictions. From £49.

Check your website free