UK GDPR: what is it and how do website owners stay compliant?
How has GDPR changed since Brexit and what do I need to do to stay compliant as a website owner?
As of January 2022, the General Data Protection Regulation (GDPR) continues to apply in the UK.
However, since the UK left the European Union, GDPR has been incorporated into UK law as the UK GDPR.
The UK GDPR mirrors the EU GDPR in many respects but has some specific provisions tailored to the UK context.
It is essential for businesses and website owners in the UK to understand and comply with the requirements of the UK GDPR to ensure the lawful and responsible processing of personal data and to avoid potential fines and penalties for non-compliance.
For the most up-to-date information and guidance on GDPR compliance in the UK, it’s recommended to consult the official website of the Information Commissioner’s Office (ICO).
But what do website owners actually have to do to keep within UK GDPR law?
To give you an idea, here are the main steps website owners should ensure are taken to keep within UK GDPR.
Not every website has to take all of the steps listed below! It depends on several factors which steps need to be put in place.
All of the necessary steps to maintain compliancy with UK GDPR are fully explained within each of my Website Management packages and a suitable suite of solutions created and managed for you.
Understand Data Processing Activities Website owners must understand the types of personal data they collect, why they collect it, how it’s used, and who has access to it. This includes data collected through forms, cookies, analytics, and any other means.
Lawful Basis for Processing Determine the lawful basis for processing personal data. This could be consent, contractual necessity, legal obligation, vital interests, public task, or legitimate interests. Ensure that data processing activities align with the chosen lawful basis.
Transparency and Privacy Notices Provide clear and concise privacy notices that inform users about the purposes of data processing, the lawful basis for processing, data retention periods, rights of data subjects, and how to exercise those rights. Make privacy notices easily accessible on the website.
Obtain Consent If relying on consent as the lawful basis for processing personal data, ensure that consent is freely given, specific, informed, and unambiguous. Implement mechanisms for obtaining and recording consent, such as checkboxes or cookie banners.
Data Subject Rights Enable users to exercise their rights under the UK GDPR, such as the right to access, rectify, erase, restrict processing, and data portability. Implement procedures for handling data subject requests promptly and transparently.
Data Security Measures Implement appropriate technical and organizational measures to ensure the security of personal data, including encryption, access controls, pseudonymization, and regular security assessments. Take steps to prevent data breaches and unauthorized access to personal data.
Data Breach Notification Develop procedures for detecting, reporting, and investigating personal data breaches. Notify the Information Commissioner’s Office (ICO) of any breaches that pose a risk to individuals’ rights and freedoms within 72 hours of becoming aware of the breach.
International Data Transfers If transferring personal data outside the UK to countries or territories without an adequate level of protection, ensure that appropriate safeguards are in place, such as standard contractual clauses, binding corporate rules, or approved certification mechanisms.
Data Protection Impact Assessments (DPIAs) Conduct DPIAs for high-risk data processing activities, such as systematic monitoring or processing of sensitive personal data. Assess the risks to individuals’ rights and freedoms and implement measures to mitigate those risks.
Data Protection Officer (DPO) Appoint a Data Protection Officer (DPO) if required under the UK GDPR. The DPO should have expertise in data protection law and act as a point of contact for data subjects and the ICO.
For the most up-to-date information and guidance on GDPR compliance in the UK, it’s recommended to consult the official website of the Information Commissioner’s Office (ICO)
What Clients Are Saying
FEEDBACK

Neighbourhood-Online has created a confidence-inspiring, bespoke and responsive web-based sales platform for GardaWorld that reflects their world class premium brand.
Lucy has brilliantly stripped away all but the essential necessities; her website design offers a simplicity and clarity in the way it guides a customer to the services we offer.
The look and feel of the website speaks to the tone required by our highly selective audience with precision and confidence.
Despite my uncertain attempts at describing my intent, Lucy has created a website that I look at now and say to myself, “that is exactly what I wanted”.
More than that, my most important customer recently commented that their website designers should aspire to deliver something akin to ours.
On a mechanical level, Lucy’s intelligent analysis and her nuanced understanding of the critical role our website plays in positioning our company and how we relate to our customers underpin her approach.
Her management of the project, from inception to rollout and handover, has been confidence inspiring and so easy to work with.
I was delighted with my new website and really enjoyed working with Lucy.
I love the beautiful, striking design and was incredible impressed with the combination of care, attention to detail and creativity which she brought to the design process.
I was particularly impressed with Lucy’s intuitive understanding of me and what I wanted for my business, backed-up by intelligent probing to ensure that her intuitions were correct and the details were exactly right.
It was genuinely a pleasure to work with someone who has such an obvious love of design and creativity. Even more gratifying was Lucy’s excitement, enthusiasm and insight about my venture.
Lucy is not only a very talented designer, she is extremely professional with great communication skills. She is very clear and patient when explaining technical aspects (which I appreciated as someone for whom technology is not my strong point) and gets things done in a no-fuss manner”
I would happily recommend Lucy and would certainly work with her again.
I had the pleasure of working with Lucy in the creation of my website for my new coaching business.At the beginning of the process I wasn’t sure what I wanted or needed, other than a virtual space that had my email address on it!I was also rather hung up on looking at other coaches’ sites and how they looked, which in retrospect was me being a bit fearful of showing who I was and what I was offering.I had no real idea about functionality or how the website could come alive. Fairly technically blind I guess!But that turned out to be okay, because working with Lucy she keeps you focused on the aspects that I know most about – me and my unique business vision.Lucy used her nurturing powers of gently helping me to distil my own essence. She skillfully helped me to focus in on what makes my brand unique and encouraged me to use some powerful reflective writing that had given me spin-tingle moments as I wrote it.She encouraged me to see this as the basis of my site and how I use words on my website. She led the process in a way that felt both exciting and straightforward.Looking back, Lucy was brilliant in that she didn’t tell me anything I didn’t need to know at each step. She refrained from blinding me with technical information that would have worried and overwhelmed me.Instead she engaged me on the most important bits and then skillfully care-taked behind the scenes to make what I wanted work.When Lucy presented me with the draft site I was a bit emotional to say the least and particularly blown away by Lucy’s design ability.I was immediately happy with her ideas because she had really taken the time to tune into me. She had also created a site that looked a million miles away from the stuffy old-fashioned sites I was coveting.We created something stylish, fresh and very ‘now’ which is exactly what I wanted but didn’t quite realise!She checked in with me a lot and celebrated our results. Lucy is very present with you and wants to be in the moment with her clients.She really cares how you feel – marketing after all is about making feelings – and she doesn’t scrimp on time and attention she gives you.I couldn’t believe how great my site was, and I have since shown it to some coaching peers who are frankly a bit jealous.Lucy was also a thorough and sturdy presence when it came to the technical handover bit. She made it all clear and bite-sized.She said that she would be around if I needed support and thankfully didn’t do one of those cringy hard sells about future upgrades for products. There was just a nice invitation for a future conversation.That was refreshing!To draw my feedback to a close, my experience of Lucy is as a gifted creative dream-weaving Website Whisperer.If that isn’t a thing already, Lucy has made it one, with her attentive and brilliant web design service.I highly recommend working with her and going on a creative adventure that was immensely good for the soul in the process of making a website that looks professional and inviting.Thanks so much Lucy!
I have over ten years experience of working as a front end web developer with various agencies and for high profile clients including the BBC, Estée Lauder, IPSO and CFAUK.
In all that time I don’t recall ever having been involved in so thorough, detailed, and all encompassing a scope process.
Lucy’s ability to absorb and collate the complex history and aspirations of our organisation surpassed all expectations.
The workshop style consultation process enabled her to cut to the electric heart of what we do as an organisation, and what we want to achieve with the new website.
The result was an astonishingly rich and nuanced understanding of our requirements and a scope that reflected that high level of comprehension.
In fact, two of the agencies we then asked to tender for the work both concurred that the scope was the best they’d ever seen and enabled them to quote for the work confidently, comprehensively, and competitively.
I would have no hesitation in recommending Lucy Granville for her scope service to any prospective client.
Lucy redesigned my website. I’ve found her approach to work professional and friendly.
She took the time to get to know me and my business and I felt as though she really understood the vision I had for my brand as a result of this.
Thank you so much for all the time and effort you have spent on my website.
Lucy is a very talented web designer, with an eye for design.
It was a great pleasure to work with her. I am not very easy to satisfy as I am a total perfectionist, but the website went beyond my expectations.
She followed my wishes for website with a simple structure, no unnecessary info and no flashy graphics.
She brought in her own ideas in to go with the above, putting a big emphasis on good photographs and a blog to tie in with social media, which she wrote.
She has an uncomplicated and refreshing manner, there was a good working atmosphere during meetings.
Lucy has been helping our business become more visible online. We have been amazed with what she has done already. Our website has gone from page 6 on Google to page 2 already. Really pleased with the results and can’t thank her enough. Brilliant service. Thank you.
Thank you so much Lucy. Your input has been priceless.
I feel confident after our session today. We’ve nailed so much and there’s a lot more clarity. We’ve figured out what we should be including and what we should be excluding.
We’ve worked out the tone for my new business, and the way to reel people in.
It is great talking to an expert because you bounce ideas off each other.
A pleasure to work with, and recommended for inspiration in ideas, and for producing quality content.
Lucy has proved a valuable resource in ideas-led creative projects, always demonstrating a fresh angle in thinking, applied to a thorough understanding of the brief.
We hired Lucy to write content for the website, and she tackled it effortlessly.
Our company’s brief was tricky, not only we are not native speakers catering for the UK market, but we were breaking ground with a new product that is difficult to explain.
Lucy was able to work with stem cell transplantation jargon transforming it into content families understand and relate to.
Lucy is very passionate, challenging the brief and going above and beyond what was asked to ensure the best quality work, and delivered on time.
I highly recommend Lucy, it was a real pleasure working with her, especially in stressful times.
I honestly can’t thank you enough. To be able to talk to someone who gets what I’m doing and understand my passions is such a relief.
Lucy and I built up a great working relationship where I felt as though I could approach her with ideas and changes and nothing was too much trouble.
She has the ability to translate a verbal description into an accurate visual representation.
I would high recommend Lucy. Her creativity, professionalism and approachability make her easy to work with.
I worked with Lucy for around 3.5 years and managed her for around 2.5 years. I found her a pleasure to work with. She is an excellent communicator with both external and internal clients and professional and knowledgeable at all times.
Her quality of work always came up to scratch and she could always be relied on to go the extra mile to make sure projects were a success.
Recent Work
WEB DESIGN • BRANDING • CONTENT
Give your online the presence it deserves.
Our journey starts with talking.
Then I produce a complete visualisation of a design that delivers your objectives to your ideal customer. We call this the Scope.
When you are happy with the Scope, the work begins.
The result? Visual design and copy content that elevates your brand + backend tools that push your business forward.