Privacy programs

GDPR and CCPA compliance that fits your business

Practical privacy programs for companies handling personal data of EU or Californian residents, built by a team that works in both legal cultures.

Who it’s for

  • US companies with EU customers or employees
  • European SMBs that need a structured GDPR program
  • Companies subject to CCPA/CPRA

What you get

  • Data mapping and records of processing
  • Data protection impact assessments (DPIAs)
  • Privacy notices, consent and cookie review
  • Vendor and data-processing agreements, international transfers
  • DPO-as-a-service for EU organisations

Outcome

  • Documented, defensible compliance
  • Clear handling of data-subject requests and breaches
  • Privacy answers ready for customer due diligence

Typical length: 6–10 weeks, then optional monthly DPO service

FAQ

Questions clients ask

Can you act as our Data Protection Officer?

Yes, through DPO-as-a-service for organisations in the EU, with a defined monthly scope.

Do you provide legal advice?

We are not a law firm. We build and run your privacy program and work alongside your counsel for legal opinions.

Let’s talk about your next audit or customer questionnaire.

Book a free 30-minute consultation. You will leave with a clear view of what your framework requires and a realistic timeline.