GDPR compliant website: cookies, consent and privacy policy
GDPR website compliance covers everything a site collects or loads: a cookie consent banner that blocks before consent, Consent Mode v2 for Google, privacy and cookie policies written on the real processing, and contact forms and analytics that start only after consent. On the sites we build it is included in the price, from €1,160 for a full website or €520 for a landing page; for an existing site we check it first and send a written quote within 24 hours.
What does GDPR website compliance include?
It covers everything about the site: what it loads, what it collects, what it states and how it asks for consent. We start from a check of what the site really does, because a correct privacy policy is written on the real processing, not on a template.
- A check of everything the site loads: analytics, advertising pixels, tag managers, fonts, maps, videos and third party widgets.
- A cookie banner with prior blocking: no profiling cookies and no tracking scripts before consent.
- A reject button as visible as the accept one, preferences that can always be reopened, and consents recorded.
- Consent Mode v2 configured, so Google Analytics and Google Ads respect the visitor's choice.
- A privacy policy and a cookie policy written on your site's processing and updated when the site changes.
- Contact forms with a notice, a separate marketing consent where needed, and data kept only as long as necessary.
- Third party content (YouTube, Google Maps, social media) loaded only after consent or replaced by a preview.
Where our work stops, we say up front: we handle the website, not the GDPR compliance of the whole company. Records of processing, internal appointments, supplier agreements and a DPO, if you need one, stay with your privacy consultant, and we are glad to work with them.
What does a cookie banner really need?
A compliant cookie consent banner blocks non essential tools until the visitor chooses, and makes rejecting as easy as accepting. Scrolling the page is not consent, boxes cannot come pre ticked, and in Italy the data protection authority treats closing the banner with the X as a rejection.
The most common problem is not a missing banner but one that blocks nothing: it shows up, yet Google Analytics or the Facebook pixel start anyway. A banner like that looks compliant without being so, and it is the first thing we check.
What should a privacy policy for a website say?
A privacy policy for a website has to say who processes the data, which data it collects, for what purposes and on what legal basis, how long it keeps them, who it shares them with and which rights visitors have. The cookie policy lists the cookies and third party tools, with how long they last.
We write them on the site in front of us: when you add a form, a map or a campaign, we update them. A generic text copied from another site is the quickest way to declare things your site does not do, and to leave out the ones it does.
How much does GDPR website compliance cost?
On the sites and landing pages we build, GDPR compliance is included in the price: a full website starts at €1,160 including VAT, a landing page at €520. For an existing site the cost depends on what it loads and how easy its platform is to work on: we check it first, then send a written quote.
| New website, GDPR compliance includedBanner, policies, forms and analytics compliant from day one | from €1,160 |
| New landing page, GDPR compliance includedThe same guarantees, on a single page | from €520 |
| GDPR compliance for an existing websiteA check of the site, then a written quote within 24 hours | Custom quote |
Prices include VAT and are starting prices.
Not quite what you're after?
Sites built compliant from day one
Two sites we built with the banner, the policies and the analytics configured before launch.
Frequently asked questions about GDPR website compliance
Let's check what your site loads.
Send us the address, we look at what starts before consent and what the policies are missing, then send a written quote within 24 hours.