UK GDPR
Relates broadly to how organisations process and protect personal data, including information collected through contact forms, accounts, analytics and other website services.
Practical website compliance support
Website compliance, without the confusion.
Websites can collect and share information in ways that are easy to overlook. Probeck can help identify what the website is doing and put appropriate privacy information, consent controls and technical measures in place.
Practical and technical support from a web developer. Formal legal advice may need a suitably qualified legal professional.
Privacy information
Privacy choicesEssential Analytics Marketing Save choices
The high-level picture
GDPR and PECR in plain English.
These rules overlap, but they address different parts of online privacy. Understanding the distinction helps explain why a website may need both clear privacy information and working consent controls.
PECR
Contains specific privacy rules for electronic communications and technologies that store or access information on a device, including cookies, pixels, scripts and similar tools.
This is a practical overview rather than legal guidance. Read the ICO's current guidance on PECR and UK GDPR (opens in a new tab) for the regulatory position.
Privacy Notices
Explain what happens to people's information.
Where a business collects personal data, its privacy information may need to explain the collection and use clearly and in plain language.
What information is collected?Why is it collected and used?Who might receive or process it?How long might it be retained?Which relevant rights do people have?How can someone contact the organisation?
Probeck's exact service could include gathering information about the website, configuring supplied documentation and publishing it appropriately. The extent of any document preparation, responsibility for legal accuracy and need for independent legal review must be confirmed before this service is offered.
Read the ICO privacy-information guidance (opens in a new tab)Consent implementation
Probeck is a CookieYes Partner.
CookieYes can be used as part of implementing and managing website cookie consent where it fits the website and agreed requirements.
The tool still needs appropriate configuration, an accurate understanding of the website's technologies, and ongoing review when the site changes. Partnership status is not legal certification and does not guarantee that a website is compliant.
View Probeck's official CookieYes partner profile (opens in a new tab)
ICO Registered
Probeck is registered with the Information Commissioner's Office. This is not a partnership, endorsement or claim that Probeck is a compliance authority.
View the ICO register entry (opens in a new tab)A practical website review
What might need checking?
The relevant checks depend on what the website does and which services it uses.
Privacy Notice
Cookie Policy
Cookie banner
Analytics
Contact forms
Newsletter signup
Embedded content
Tracking pixels
Third-party services
Data retention
Business details
Compliance is not limited to cookies and privacy.
A business website may also need to display information that identifies the organisation behind it.
For a UK limited company, official guidance says its website must show the registered company number, registered office address, where in the UK the company is registered, and its limited-company status. The registered company name must also appear on the website.
These details are commonly placed in the footer or another business-information area that remains easy to reach throughout the site.
Read the GOV.UK company disclosure guidance (opens in a new tab)UK limited companyBusiness identity
- Registered name
- Full company name, including Limited or Ltd where applicable
- Company number
- The registered company number
- Registered office
- The registered office address
- Place of registration
- England and Wales, Scotland or Northern Ireland
Disclosure requirements vary with legal structure, VAT status, activities, online selling and other circumstances. This is practical website support, not a complete statement of the law or formal legal advice.
VAT information
Consider VAT details in the wider business review.
VAT-registered businesses have additional requirements for business documentation and VAT invoices. The appropriate presentation of VAT details should therefore be considered alongside the website, invoicing and customer journey.
That does not mean every website must display a VAT number in the same way. The business's VAT status, transactions and documentation need to be understood before making that decision.
Read the GOV.UK invoice guidance (opens in a new tab)Selling online
Online selling brings additional questions.
Websites selling goods, services or digital content can have further information and consumer-law requirements covering matters such as business identity, prices, payment, delivery, cancellation and returns.
This page does not attempt to provide comprehensive legal advice. The selling model and customer type should be reviewed for the specific business.
Compliance during a website build
Plan the data flows before launch.
It is generally easier to consider privacy information and consent while forms, analytics, cookies, embedded services and marketing tools are being chosen and implemented.
That gives the build team a clearer opportunity to minimise unnecessary collection, identify third parties and make consent mechanisms part of the working website rather than a visual addition afterwards.
Explore Website Design & DevelopmentFormsAnalyticsCookiesEmbedsMarketing toolsPrivacy informationConsent controlsWebsite build
Ongoing change
Not necessarily set once and forgotten.
A website's behaviour changes when new tools or features are introduced. That can change the information being collected, the technologies placed on devices and what visitors need to be told.
New analyticsMarketing toolsPluginsEmbedded contentFormsAdvertisingThird-party integrations
A practical review point should form part of future website changes, with documentation and consent configuration updated where necessary.
Pricing
Choose the scope the website needs.
The final price depends on the website, agreed outputs, implementation work and ongoing responsibilities.
Website Compliance Review
From £350
Confirm the review scope, outputs and any implementation allowance.
Privacy / Cookie Setup
From £400
Confirm documentation responsibility, technical setup and the information you need to supply.
Ongoing Cookie Consent Management
From £8/month
Confirm included reviews, website changes and any separate tool charges.
Confirm VAT treatment, third-party subscriptions, legal review and what happens when the website or applicable guidance changes.
Website compliance FAQs
Practical questions to investigate.
Does my website need a Privacy Notice?
It depends on whether and how the organisation collects or otherwise processes personal data. Contact forms, accounts, enquiries and some analytics are common reasons to assess what privacy information must be provided.
Does my website need a cookie banner?
It depends on which cookies or similar storage and access technologies the website uses, their purposes, and whether an exception applies. Audit the website before deciding what consent or objection mechanism is appropriate.
What is the difference between GDPR and PECR?
UK GDPR concerns the processing of personal data. PECR adds specific rules for electronic communications and storage or access technologies such as cookies, pixels, scripts and tags. They can apply together.
Can I use Google Analytics without consent?
That depends on the exact configuration and purpose. Current UK rules include a narrow statistical-purposes exception with conditions, including clear information and a simple way to object. Analytics used for tracking, profiling, advertising or other purposes may require consent. Assess the implementation rather than relying on the product name.
What happens if someone rejects cookies?
Technologies that rely on consent should not be loaded for that visitor. Essential or otherwise exempt uses need to be identified separately, and any objection mechanism relied on for an exception must be respected.
Is a cookie policy the same as a privacy notice?
No. They address related but different information. A cookie policy explains relevant storage and access technologies, while privacy information explains how personal data is collected and used more broadly. The exact documents and format depend on the organisation.
Can Probeck provide legal advice?
This page offers practical website compliance support and technical implementation, not formal legal advice. Where legal interpretation or bespoke legal drafting is needed, the business should use a suitably qualified legal professional.
Do I need to review compliance when my website changes?
Potentially, yes. New forms, analytics, advertising, plugins, embedded content and integrations can change data use or storage and access technologies, so the existing information and controls should be reviewed.
Does my limited company website need to show its company number?
UK limited-company websites must show the registered company number, registered office address, place of registration and limited-company status, as well as the registered name. Other business structures can have different disclosure requirements.
Does my VAT number need to appear on my website?
Do not assume one rule fits every website. VAT-registered businesses have additional requirements for documents and VAT invoices; how VAT information should appear online depends on the business, transactions and wider requirements and may need professional advice.
The Knowledge Centre
Understand the website before changing the banner.
Does your website need a cookie banner?
Start with the technologies and purposes in use.
Read guideWhat information does a UK limited company need on its website?
Review registered-name and company-detail disclosures.
Read guideWhat legal pages does a UK business website need?
Start with the organisation, its data use and how it sells.
Read guide