Practical help understanding what your website is actually doing
It is easy for a website to become more complicated over time.
A site that originally contained a few pages and an email address may later acquire:
- enquiry forms;
- analytics;
- tracking pixels;
- mailing-list integrations;
- ecommerce;
- online payments;
- customer accounts;
- booking systems;
- social-media integrations;
- third-party plug-ins; and
- multiple administrator accounts.
Each addition can affect how information is collected, shared and protected.
Livetech’s Website Data & Compliance Review is a practical, light-touch review designed to help organisations understand the technology they are operating and identify obvious areas requiring attention.
What we look at
The review can cover:
Information collection
- contact forms;
- enquiry forms;
- registration forms;
- customer accounts;
- newsletter sign-ups; and
- other ways information enters the website.
Cookies, analytics and tracking
We can identify technologies such as:
- analytics;
- advertising pixels;
- tag-management systems;
- embedded third-party services; and
- cookie-consent mechanisms.
Third-party services
We can identify important integrations and help explain what information may be passing to them.
Website access
We can review:
- administrator accounts;
- obsolete users;
- access arrangements; and
- obvious account-security issues.
Hosting and security
Where Livetech manages the website, we can explain:
- hosting arrangements;
- SSL/TLS;
- backups;
- website maintenance;
- security measures; and
- relevant infrastructure providers.
Payments and ecommerce
For ecommerce sites we can review how payment functionality is technically integrated and whether payment-card information appears to touch the website itself.
We can help identify technical PCI DSS considerations, but we do not provide PCI certification.
Privacy information
We can compare the visible website privacy and cookie information with the technology we actually find on the site and identify obvious inconsistencies or gaps.
What you receive
Following the review we provide a concise practical action list.
Issues can be grouped into:
OK
No obvious action identified within the scope of the review.
Needs Attention
A practical or technical improvement is recommended.
Specialist Advice
The issue potentially requires legal, DPO, PCI or other specialist regulatory advice.
Where appropriate, Livetech can separately quote for technical work needed to address identified issues.
What the review is not
The Website Data & Compliance Review is a practical technical review.
It is not:
- a legal opinion;
- a statutory GDPR audit;
- certification that an organisation is GDPR compliant;
- PCI DSS certification;
- a penetration test;
- a formal cyber-security accreditation;
- a substitute for a Data Protection Officer; or
- advice from a solicitor or regulated professional.
Our purpose is to help you understand the technology, identify obvious practical issues, fix the technical matters we are qualified to fix and tell you when specialist advice is appropriate.
Reasonable questions remain part of normal support
You do not need to purchase a review every time you have a data protection question.
If Livetech manages your website, we are normally happy to answer reasonable questions about the technology we provide as part of our normal client relationship.
The paid review is intended for Clients who want us to undertake a more structured examination rather than answer an individual support question.
Who is it suitable for?
The review can be particularly useful for:
- established small and medium-sized businesses;
- websites that have evolved over several years;
- ecommerce businesses;
- professional practices;
- organisations preparing for an internal compliance review;
- businesses that have changed staff or website suppliers;
- organisations unsure which analytics or tracking systems are running; and
- businesses that simply want a clearer picture of their website’s data footprint.
Need specialist advice?
If we find an issue outside our competence, we will say so.
Depending on the issue, that might mean recommending advice from:
- a solicitor specialising in data protection;
- an independent Data Protection Officer or consultant;
- a PCI Qualified Security Assessor;
- a penetration-testing provider;
- a cyber-security specialist; or
- another appropriately qualified professional.
We can provide the technical information they need and work with them on implementation.
Request a Review
Contact Livetech to discuss your website and the appropriate scope of review.
Email: [email protected]
Telephone: 01492 233 606
Read about our approach to Data Protection, Security & Compliance