GDPR. Making Sure That You Treat Data Correctly

On the 25th May 2018, the General Data Protection Regulation, or GDPR, comes into effect for all companies that are based in the EU, or have a connection with entities from the EU. The basis of this new regulation is to ensure that people ensure the safety and security of any and all personal data that they hold for anyone in any form, be that in a database, via a third party online or indeed, even in written form. Not only must the security of this data be paramount, but what that data is used for must be clearly defined. Due to this regulation, your website may not be as secure or indeed follow the rules that it should. To help make the basics easier to follow, we have detailed a checklist to make sure you have done as much as you can.

Secure your data. Update your users.

Ensure that any stored personal data is protected and that you use it as you said you would

The following checklist covers the main aspects that you should be aware of, and what needs to be in place on your website. PLEASE NOTE. This is only a guide and we highly recommend that you seek basic legal help to ensure that you are fully compliant with GDPR so as to avoid incredibly large fines for misuse of data or incorrectly stored information.

  • Read at least one of the recommended resources from the list below to familiarise yourself with GDPR
  • Create/update your cookie policy to detail how or why you use cookies on your website - please ask for information regarding creating a cookie policy, should you wish us to help
  • Add a popup to your website when people visit your site to make them aware of your cookie policy - we can cleanly and non invasively install this popup on your Drupal website, please ask for help
  • Create/update a privacy policy to detail what information you collect via your website, how you use it and how it is stored. Examples could be but not limited to via webforms, eCommerce purchases, newsletter signups - please ask for information regarding creating a privacy policy, should you wish us to help
  • Ensure that your privacy policy is clearly visible via a top level link on all pages - we can add the relevant footer menus if required, please ask for help
  • If you store information on your website via a database or webform application, or operate an eCommerce site of any form, ensure that you have an SSL certificate installed to encrypt any transmitted data - more info
  • If you store information on your website via a database or webform application, or operate an eCommerce site of any form, ensure that your Drupal website has a security package attached to it to ensure that all core and contributed modules are kept up to date and patched immediately when any security warnings are issued - more info
  • Whenever someone transmits data to you that you store for any period of time, ensure that a link to your privacy policy is present
  • Detail in your privacy policy any third party products and widgets that you might use on your site that may redirect or capture data in any form. This includes but is not limited to Google Analytics, PayPal, Mailchimp, Facebook, Twitter, Instagram, Stripe, Infusionsoft
  • Whenever someone is requested to submit personally identifiable data, detail to them exactly what they will receive and for what purposes. From that point onwards, you may only contact them regarding the subject that they were advised about
  • In signing up to receive information, they must tick, and not auto tick, to confirm they are happy to receive correspondence
  • Detail clearly in your privacy policy how someone can find out what data you hold about them and how they can request its deletion
  • If you have an existing database of people that you contact for newsletter purposes or any other nature, you must contact them to re-request permission to keep in touch with them, for what reason and advise them of your new privacy policy
  • CRITICAL NOTICE. This is only a guide and we highly recommend that you seek basic legal help to ensure that you are fully compliant with GDPR

Recommended resources

GDPR. Making Sure That You Treat Data Correctly

Interested in our web, graphic or print design services?
Simply call 07825 091983 to get started today

Content management systems by Drupal

Content Management (CMS)

SEO friendly, technophobe friendly

Having a website needn't be a daunting prospect. You should be able to edit and add to your site quickly and easily. That's why all of our projects are created using a Content Management System. This means that you don't need to swallow a manual to work with your site, everything is designed so that even a novice feels comfortable.

 eCommerce solutions using Drupal and uBercart

eCommerce Website Solutions

Easy to manage, safe to sell

If you are looking to sell your products online, an eCommerce solution offers all the ease of use that a CMS brings, along with options for secure transactions. Our eCommerce packages allow integration with a wide range of payment gateways such as PayPal, Worldpay, CardSave, SagePay and many more, allowing you to choose the method that suits you.

 Websites which work on all devices and internet browsers

Cross Browser Compatible

Pixel perfect, whatever the device

Looking great on your computer is one thing, but making sure your website looks perfect on everyone elses is what's most important. With a wide selection of browsers and devices, it is easy to over look small imperfections. At Jemford Design, we test your site across a selection of popular platforms to make sure your website always looks its best.
Expand your website as you grow

Bolt On Expansion Made Easy

Integrate new features as you go

Many people worry that they must get everything done in one big push when creating a website and fear the financial outlay it will bring. With Jemford Design, your website can start as small as an acorn and grow with your business by simply 'bolting on' new features as you need them or as finances allow, without worrying about huge extra costs.

 Lightning fast, UK based web hosting at Jemford

UK Based Web Hosting

99.9% uptime on fast UK servers

If you decide to work with Jemford Web Design, you are safe in the knowledge that your first years hosting is covered, for free. You will also be comforted by the fact that we only use UK based, lightning fast servers to host your site and email. Our hosting providers offer first class service and excellent uptime reliability meaning your site is in good hands.

 Excellent customer service and value for money at Jemford Web Design

Jemford Value & Service

No hidden costs, excellent service

With us, you know there are no hidden monthly fees waiting around the corner to bite you. Our philosophy is simple, you only pay when we work. We are always on hand to offer advice when needed, and always provide a quote before we undertake any project. Jemford has a reputation of excellent results and importantly, customer satisfaction.
"After a number of years of being completely exasperated with the way my website was being run, I approached Just D3SIGNS now Jemford Web Design to rebuild it. Stuart completely rebuilt my site. He explained all the technical talk in a way I understood, which has made my site easy and quick to update. For the first time I can do this myself and not have to wait weeks for someone to do this for me, with a hefty bill at the end. Stuart understands what I need and want from my website and has provided the tools and knowledge to achieve this. I feel I can always approach Stuart with any website queries. My site has grown and now ranks well on Google. I only wish I'd done this years ago as I've not looked back."
read more...