Cookie consent banner is displayed before setting non-essential cookies

Users can give granular consent (analytics, marketing, functional separately)

Consent can be easily withdrawn at any time

Pre-ticked checkboxes are NOT used for consent

Privacy policy is easily accessible from every page

Policy clearly states what data is collected and why

Legal basis for processing is specified

Third-party data sharing is disclosed

Users can request access to their personal data

Users can request deletion of their data (right to be forgotten)

Data portability option is available

Process exists to handle subject access requests within 30 days

Website uses HTTPS throughout

Data breach notification procedure is in place

Data processing agreements with third parties exist

DPO (Data Protection Officer) is appointed if required

GDPR Compliance Checker

Related Tools