Privacy, explained plainly. Page 3
Guides to the GDPR, cookie consent, privacy requests and the documents your business needs. Each one answers the question first, then shows the article behind it.
Vendors and transfersData processing agreement (DPA): when you need one and what it must containWhat a GDPR data processing agreement is, when Article 28 requires one, the eight things it must say, and how to handle the standard DPAs offered by vendors and the ones you owe your clients.15 October 2026 · 5 min read
Rights and requestsData subject request reply templates: access, erasure and moreCopy-and-adapt reply templates for GDPR data subject requests: acknowledgement, identity check, access, erasure done or refused, extension and refusal, with the deadlines.14 October 2026 · 10 min read
Rights and requestsHow to respond to a GDPR data subject access request (DSAR)A step-by-step guide to answering an access request within the one-month GDPR deadline: checking identity, finding the data, what to include in the reply and when you can extend or refuse.13 October 2026 · 5 min read
Policies and recordsRecord of processing activities (Article 30): does a small business need one?What a GDPR record of processing activities contains, who must keep one, how the Article 30(5) exemption for small organisations really works and how to build a useful register.12 October 2026 · 4 min read
Trust and transparencyWhat is a privacy center, and what should it include?A privacy center is a public page where a company shows its privacy policy, vendors, data locations and a request form. Learn what to put on it, why customers ask for one and how to keep it accurate.9 October 2026 · 4 min read
Cookies and consentGDPR cookie consent: what the rules actually requireWhen you need consent for cookies, what valid consent looks like under the ePrivacy Directive and the GDPR, and what a cookie banner has to do, step by step.7 October 2026 · 5 min read
Policies and recordsWhat to include in a GDPR privacy policy (checklist)The information Articles 13 and 14 of the GDPR require in a privacy policy, as a checklist, with what each item means in practice and the mistakes to avoid.6 October 2026 · 5 min read