Privacy & Tracking

Find out what your site collects, prove it, and put real consent in front of it

Quick jump to

What are you looking for?

We can help you but we need to know what you are looking for first

Find out what my site collects

The starting point. We record what fires on a cold visit, inventory every cookie and pixel, read your policy against reality, and hand you a plain-language report of the gaps.

KEY INFO

Recording of what fires pre-consent

Full cookie and pixel inventory

Quebec and EU exposure flagged

Deeper report for your developer or agency to tackle fixes

Put real consent in place

Already know it's a mess? We gate the tags, set profiling to off by default, write a first-party policy in your name, and re-record the site to confirm nothing fires early.

KEY INFO

Tags held until someone opts in

Reject that actually rejects

First-party policy in your name

Re-recorded and verified

Legal sign-off on your situation

Do I even need a cookie banner?

Honest answer, not always, and anyone who tells you every site needs one is selling you a banner. It depends on what you run and who visits. Let's find out which is true for you. Ask us

ADDITIONAL THINGS WE CAN DO

What do these do?

Privacy Policy That Is Yours

A first-party policy in your own name on your own domain, rather than one your last developer left behind.

Cookie Policy

The companion page listing what each cookie is for and how long it sticks around.

Consent Banner Setup

A banner where reject actually rejects, wired so tags hold until someone opts in.

Tracker & Cookie Inventory

A documented list of every cookie, pixel and tag on your site, categorized properly.

Tag Manager Cleanup

Find the tags nobody remembers adding, remove what you don't use, and gate what you keep.

Withdraw Consent Link

A way for visitors to reopen the choice and change their mind, which the law expects and most sites skip.

Named Privacy Contact

A published, accountable person for privacy questions, which PIPEDA asks you to have.

Annual Re-Scan

New plugins add new tags. A recurring check catches drift before it becomes a gap.

Why hire us?

SHORT ANSWER

We show you what your site is really doing before anyone agrees to it, then make it stop until they do.

LONG ANSWER

Almost nobody chose their tracking on purpose. It arrived with a theme, a marketing plugin, a booking widget, or a developer who set up Google Analytics in 2019 and moved on. Nobody has looked since, and the site has been collecting the whole time.

So we start by looking. We load your site cold, the way a first-time visitor does, and record every request it makes and every cookie it sets before a banner is even touched. Then we compare that against what your privacy policy claims. The gap between those two things is the finding, and it is usually the first time anyone has shown it to the business owner.

A pattern we see constantly: the privacy policy on a small business site belongs to the agency that built it, not to the business. Wrong company name, wrong domain, wrong contact. That policy does not cover you, because it never described you. It is a five-minute thing to spot and it turns up more often than not.

The other pattern is a consent banner that does not consent. It appears, it looks reassuring, and the analytics and ad tags fired before it ever rendered. Reject does nothing. A banner is a piece of theatre unless something behind it is actually holding the tags back, and checking that is a matter of pressing reject and looking at what still runs.

What we do about both is ordinary engineering work. Gate the tags properly, default profiling to off, write a first-party policy in your own name that names the third parties you actually use, publish a contact, and give people a way to change their mind later. Then we re-record the site and confirm nothing fires early.

To be clear about what we are: we find and fix the technical gaps and document the work. We are not lawyers and we do not issue legal opinions on your specific situation. Policy drafts come from vetted templates fitted to what your site really does, and we recommend your lawyer review them for anything unusual about your business.

How we work

This is how we take your site from nobody quite knows what it collects, to documented, consented, and verified

STEP 1

Audit

STEP 2

Report

STEP 3

Remediate

STEP 4

Verify

Still have questions?

Reach out and we'll help you figure out what your business needs.

Offers

Benefits of going with us

Two hours of fixes included when you choose us to fix the gaps found in your audit.

** Anything past those two hours is quoted at our hourly rate

Hire us to fix what we found and the re-scan is on us.

** Re-run once the fixes are live, so you have proof they held

Standards & tools we work with

The rules your site is measured against, and what we use to see what it actually does.

PIPEDA

The federal privacy law. Consent, openness, and saying why you collect are the principles most tracking setups quietly miss.

Quebec Law 25

Applies the moment you have Quebec visitors. Profiling has to sit off until someone chooses to turn it on.

Bill C-36

Tabled June 2026 and still moving through Parliament. If it passes it replaces PIPEDA and raises the stakes considerably.

GDPR

If you have European visitors, consent has to come before the tags fire, not after.

Network and cookie recording

We record every request and cookie your site sets on a cold visit, before anyone touches a banner. That recording is the evidence.

Google Consent Mode

The mechanism we configure so Google and partner tags genuinely hold until a visitor opts in.

Contact us

Contact us to start the conversation with our team, someone will get back to you as soon as possible. We tackle all types of projects, if you aren't sure if we cover your need please ask.

HOW TO CONTACT US?

Fill out form here