Website Guides
Practical guides to help European businesses understand and fix website issues.
Accessibility
ACM Enforcement: Digital Accessibility Is Now Mandatory
The ACM can now enforce digital accessibility requirements in the Netherlands. Here is what they check and what non-compliance means for your business.
Does the European Accessibility Act Apply to Your Business?
The EAA became enforceable in June 2025. Find out if it applies to your business, what it requires and what happens if you don't comply.
EAA Penalties: What Happens If Your Website Isn't Accessible
The European Accessibility Act is enforceable. Here are the penalties for non-compliance and what enforcement looks like in practice.
European Accessibility Act for online shops in Ireland
The EAA has been enforceable since 28 June 2025 in Ireland. S.I. No. 636/2023, CCPC supervision, criminal penalties and micro-enterprise exemption.
Accessibility Statement: What It Is and How to Write One
An accessibility statement shows your commitment to an accessible website. Here is what to include and a template you can use.
Restaurant Website Accessibility: Menu, Booking & Ordering
Your restaurant website menu, booking form and ordering system need to be accessible. Here is what to fix and how to do it.
Website Accessibility Overlays vs. Real Compliance
Accessibility overlays promise a one-click fix but don't deliver. Learn why they fail and what actually works.
Hotel Website Accessibility: Making Booking Work for Everyone
Hotel booking systems need to work for everyone. Here is how to make your hotel website accessible and meet EAA requirements.
GDPR & Privacy
Complete GDPR Website Audit: Step-by-Step Checklist
A step-by-step GDPR audit checklist for your website. Check cookies, tracking, privacy policy, forms, third-party services, and security in one pass.
Cookie banner dark patterns in Ireland: what the DPC expects in 2026
The 12 cookie banner dark patterns per EDPB taxonomy. DPC guidance, IAB Europe ruling and what the scanner detects after clicking reject all.
Cookie consent in Ireland: DPC rules your website must follow
Cookie consent rules for Irish websites. SI 336/2011 requirements, DPC dark pattern guidance, what 'strictly necessary' means, and how to test your banner.
Do I Need a Cookie Banner? A Simple Decision Guide
Not sure if your website needs a cookie banner? This simple guide helps you decide based on what your website actually does.
GDPR Compliance Checklist for Your Website (2026)
A practical GDPR checklist for small business websites. Check cookies, privacy policy, consent forms, and tracking scripts.
GDPR compliance for Irish businesses: website checklist 2026
What Irish SMBs must do to comply with GDPR on their websites. Privacy policy, cookie consent, CRO number, DPC enforcement cases, and a free website check.
Google Fonts and GDPR: Why Your Website Might Be Leaking Data
Loading Google Fonts from Google's servers sends visitor IP addresses to the US. A German court fined a website owner for this. Here is how to fix it.
How to Create a Privacy Policy (Free Generator + Guide)
Create a GDPR-compliant privacy policy for your website. Use our free generator or follow this guide to write one yourself.
Is your website GDPR compliant? Free website check for Irish businesses
Free GDPR website check for Irish businesses. Our scanner tests cookie consent, privacy policy, company registration details, security, and more. Results in 60 seconds.
Website privacy policy requirements in Ireland: what the DPC expects in 2026
The 14 mandatory elements of a GDPR privacy policy for Irish websites. DPC guidance, LinkedIn EUR 310M transparency case and practical checklist for SMEs.
Cookie Banner Requirements 2026: What Actually Counts
Most cookie banners fail basic GDPR requirements. Here is what yours actually needs: reject buttons, no dark patterns, real consent.
GDPR Fines for Small Businesses: Real Cases and Amounts
Real GDPR fines for small businesses: actual cases from 1,000 to 50,000 EUR. What triggers enforcement and how to avoid it.
GDPR for dental practices in Ireland
GDPR and data protection for Irish dental practices. Patient data as special category, Dental Council registration, record retention, online booking, and breach notification.
GDPR for estate agents in Ireland: PSRA compliance
GDPR for Irish estate agents. PSRA licence display requirements, client and tenant data, viewing records, anti-money laundering, photography, and website compliance.
GDPR for restaurants and hospitality in Ireland
GDPR for Irish restaurants, hotels, and hospitality businesses. Reservation systems, WiFi, loyalty programmes, CCTV, staff data, and free website check.
GDPR for solicitors in Ireland: Law Society requirements
GDPR for Irish solicitors. Law Society of Ireland requirements, client confidentiality and GDPR overlap, anti-money laundering data retention, and website compliance.
Google Maps on Your Website: The GDPR Problem
Embedding Google Maps sends visitor IP addresses and browsing data to Google without consent. Here are GDPR-compliant alternatives.
Privacy Policy: What Must Be in It and What Is Optional
GDPR Articles 13 and 14 require 12 specific elements in your privacy policy. Here is exactly what must be there and what you can skip.
YouTube Embeds and GDPR: Why Your Video Sends Data to Google
Embedding a YouTube video on your site sends visitor data to Google before they press play. Here is what happens and how to fix it.
Image Copyright
CopyTrack, PicRights, or Getty: Is That Letter Legitimate?
Received a letter from CopyTrack, PicRights or Getty Images? Here is how to verify if it is real, what they can legally demand, and what to do next.
Getty Images Demand Letter: What to Do (2026 Guide)
Got a Getty Images demand letter? Here is what to do, step by step. Don't panic, don't ignore it, and don't pay immediately.
Security
My Website Says 'Not Secure'. Here's How to Fix It
Your browser shows 'Not Secure' for your website? Here is what it means and how to fix it step by step.
Website Security Checklist: 10 Things to Check Today
A practical security checklist for small business websites. 10 things you can check and fix today without technical expertise.
GDPR Requires a Secure Website: What You Need to Know
GDPR Article 32 requires you to protect personal data with appropriate security. Here is what that means for your website.
Outdated WordPress Plugins Are a Security Risk
Outdated WordPress plugins are the top attack vector for small business sites. Learn how to check, update and review your plugins.
SPF, DKIM and DMARC: Email Security in Plain Language
SPF, DKIM and DMARC explained simply. Learn what they do, why you need them and how to set them up for your domain.
Website Hacked? Here's What to Do Right Now
Your website has been hacked or shows signs of malware. Here are the steps to take right now to contain the damage and get back online.
What Does a Website Security Scan Check?
What a website security scan actually checks: SSL, headers, vulnerable libraries, outdated CMS, and more. Learn what the results mean and how to fix issues.
Why Your Business Emails End Up in Spam (And How to Fix It)
Business emails landing in spam? You're probably missing SPF, DKIM, or DMARC records. Here's what they are and how to set them up.
SSL Certificate: What It Is, Why You Need It
An SSL certificate encrypts data between your website and visitors. Here is what it does, why you need one and how to get one for free.
Legal Pages
ODR Platform Abolished: Remove the Link From Your Website
The EU Online Dispute Resolution platform was abolished in July 2025. If your website still links to it, here is what to do.
Website trading disclosures in Ireland: what the law requires in 2026
Mandatory website disclosures for Irish businesses. Companies Act 2014 s.151, e-commerce regulations, CRO requirements and practical checklist.
What Irish businesses must display on their website: legal requirements
Companies Act 2014 and E-Commerce Regulations 2003 requirements for Irish business websites. CRO number, registered address, directors, VAT number, and more.
Impressum Requirements by Country: Germany, Austria and Beyond
Impressum requirements differ by country. Germany, Austria and Switzerland have strict rules. Here is what you need.
Germany: §5 DDG Replaced §5 TMG, Update Your Impressum
The German TMG was replaced by the DDG in 2024. If your Impressum still references TMG, here is what changed and how to update it.
E-Commerce
Withdrawal button for e-commerce: what Irish webshops need by June 2026
From 19 June 2026 every EU webshop must show a withdrawal button. Directive 2023/2673, Article 11a. Ireland missed the transposition deadline. Practical checklist.
"Buy Now" vs "Order": Why Your Button Text Matters Legally
EU law requires specific wording on order buttons. The wrong text could make your orders non-binding. Here is what your checkout button must say.
EU Checkout Page Requirements: Button Text, Pricing & Consent
EU rules for your checkout page: order button text, price display, withdrawal rights, and consent requirements. What you must show before the customer clicks Buy.
Discount Pricing Rules: The 30-Day Prior Price Requirement
EU Omnibus Directive requires showing the lowest price from the past 30 days when advertising a discount. Here is how it works.
EU Consumer Rights for Online Sellers: Plain-Language Guide
EU consumer protection law affects every online shop. Here are the rules you need to follow, explained without legal jargon.
The 14-Day Withdrawal Right: What Every Online Seller Must Know
EU law gives online shoppers 14 days to return purchases without reason. Here is what you must tell them and how to handle it.
Double Opt-in: Required or Not? It Depends on the Country
Double opt-in is required in Germany, recommended in Austria, and optional elsewhere in Europe. Here's what the law says in each country and how to set it up.
Newsletter Signup Forms: GDPR Requirements
Your newsletter signup form needs more than a checkbox. Here are the GDPR rules for email consent, what to store and how to avoid common mistakes.
Pre-checked Signup Boxes Are Illegal: Here's Why
Pre-checked checkboxes for newsletters and marketing don't count as valid consent under GDPR. The Planet49 ruling made this clear. Here's what to fix.
Email Marketing Consent: Country-by-Country Rules
Email marketing rules differ across Europe. Here are the consent requirements for the Netherlands, Germany, UK, Belgium and more.
The Soft Opt-in Exception: When You Can Email Without Consent
The soft opt-in lets you email existing customers without explicit consent. But strict conditions apply. Here is how it works.