Glossary
Also called: GDPR, UK GDPR, cookie banner, PECR, privacy policy, data protection.
UK GDPR, together with the Data Protection Act 2018, sets the rules for collecting and using personal data, such as the names and phone numbers people send through your enquiry form. You need a lawful reason to use it, should keep it secure, and must explain what you do with it, usually in a privacy notice.
Cookies are small files websites store in a visitor's browser. Separate rules, known as PECR, mean you generally need consent before using cookies that are not strictly necessary, such as advertising trackers. That is what cookie banners are for. The rules for some low-risk analytics cookies have been relaxed recently, so check the ICO's current guidance.
The Information Commissioner's Office (ICO) regulates this in the UK and publishes plain-English guidance for small businesses. Most organisations that handle personal data electronically also need to pay the ICO an annual data protection fee unless exempt.
Collecting customer details through a website means you are handling personal data, whatever size your business is. Getting the basics wrong, such as having no privacy notice or loading tracking without consent, risks complaints and regulator attention. Getting them right is mostly paperwork and sensible setup.
Example. A groomer's website has a short privacy notice explaining that booking details are used only to arrange appointments, and a cookie banner that only loads advertising tracking if the visitor accepts.
A plain-English guide to Google Analytics 4 for small businesses: the handful of reports worth checking, how to track form and call enquiries, and the UK cookie questions to ask.
Read →How small businesses get repeat customers: reminder timings by business type, following up after the job, keeping simple records, loyalty that works, and the consent rules.
Read →Contact form best practice for small business websites: which fields to ask for, how to lay them out, what happens after someone presses send, spam, GDPR and the mistakes that lose enquiries.
Read →£299to set up
£99a month
3working days to launch
You approve it before anything goes live.
Designed from scratch, every word written for you, hosting and Google setup included. Or pay £1,795 once and £49 a month with no minimum term.
£299 setup, then £99 a month. Live in 3 working days. Tell us what your business does - we reply the same working day.
Nerdsharks
A real person replies, usually the same working day
Hi 👋 What can we help with? Tap one, or type below.
Got it, thanks. We’ll reply the same working day - check your inbox or phone.