Email and trust
UK GDPR
The data protection law behind the privacy policy.
What is UK GDPR?
UK GDPR is the law that governs how any business collects, stores and uses personal data, backed by the Data Protection Act 2018 and enforced by the ICO. For a small business website it means telling people what a form collects and why, keeping it safe, keeping it no longer than needed, and answering when they ask what you hold.
What it means for a small service business
A contact form, an analytics tag and an enquiry inbox all count. The visible duty is a privacy policy that actually describes what you do. The invisible one is not leaving customer details on a public link or an old laptop.
Does your business need to do anything about UK GDPR?
Yes. A short honest privacy policy, and a business that handles customer data registers with the ICO for about forty pounds a year.
See also
Act on it
The tools and guides that deal with UK GDPR on this website, then the free review if you want it looked at properly.
Check whether your website is legal →Get your free review