Law 25 compliance
Your site collects information. Here is what it has to do.
A fixed-price compliance package, delivered in two to three weeks, for businesses that take bookings, orders or enquiries online.
A contact form asks for a name, an email and a phone number. A cookie banner appears after the page loads. The privacy policy was last updated in 2021. Those three details are enough to make a site non-compliant, even if nobody has complained.
Law 25 is about more than one more document in the footer: what data you collect, why, how long you keep it, and how someone can have it corrected or deleted. On a website, that becomes four concrete changes, plus a validation meeting.
What is included
- Audit of the public site: forms, cookies, pixels, newsletter and customer account.
- Privacy policy written for your business, with third parties named and retention periods stated.
- Consent in the right place, before collection where the law requires it, and a cookie banner that blocks non-essential scripts before the choice.
- Incident register and a procedure for access, correction and deletion requests.
- A validation meeting with whoever manages the site, and one update included within 12 months.
How it runs
- 01 · 1 h
Audit
I browse the site as a visitor, then inspect the scripts, forms and installed tools.
- 02 · 4 h
Writing
The policy and the register start from your actual tools, not from a purchased template.
- 03 · 4 h
Integration
Banner, consent boxes, links and copy are placed on the site.
- 04 · 3 h
Validation
We review together, I correct, and you leave with the documents and the access.
Who it is for
- Clinics and firms that collect health or financial information.
- Shops with bookings, online orders or a newsletter.
- Property managers who receive rental applications.
- Apps and sites with a customer account.
What the package does not cover
- This is not legal advice. I prepare the documents and the technical changes; a lawyer validates particular situations, such as health, finance or minors’ data.
- The package does not include a site rebuild. If the site is slow or not bilingual, that is a separate project, priced on the pricing page.
- On a closed platform, some scripts cannot be blocked before the visitor chooses. I document it and propose the best option available.
- Beyond this scope, extra hours are billed at the public rate of $100/h.
Law 25 FAQ
The questions I get before we start.
If your business collects personal information in the course of a commercial activity, yes. A contact form, a newsletter or a customer account is enough.
Two to three weeks, depending on site access and the number of forms. Writing starts after the audit.
No. Compliance is applied to the existing site. On a closed platform, technical limits are documented in the deliverable.
No. I prepare the documents and the changes; a lawyer validates particular situations, such as health or finance.
The policy, register and procedures are yours. They carry over to the new site; plan the transfer into the project.