Privacy notices, internal policies and consent-clause language, drafted to match what your systems actually do — not boilerplate adapted from somewhere else and hoped to fit.
Every notice, policy and clause is checked against real practice before it's drafted — not adapted from somewhere else and hoped to fit.
Public-facing notices describing what data is actually collected and why, not generic boilerplate.
The internal-facing rules and procedures staff are expected to follow, matched to real operational practice.
The specific wording used at the point of consent capture, checked against whether it actually matches what happens after someone agrees.
Concrete rules for how long data is kept and how it's disposed of, not a vague "as required by law" line.
A process for keeping policy language current as systems and practices change.
Drafted, reviewed with your team, and handed over with a plan for staying current — not a one-time document dump.
Drafting only starts once practice discovery is done, and nothing publishes without an internal review pass.
Understand what your systems and processes actually do, before drafting anything.
Covers data collection, consent capture and retention practices as they actually run today, not as documented on paper.
Write notices, policies and clause language matched to that reality.
Each document is written against the specific practices confirmed in discovery, not a template filled in afterward.
Walk the drafts through with your team to confirm accuracy before publishing.
The people who actually run the practices being described get a chance to flag anything the drafts got wrong.
Deliver final documents plus a plan for keeping them current.
Includes the review-cadence recommendation, so the documents don't quietly go stale after the first year.
Start with a scoping call — 30 minutes, no obligation.
Book a Consultation