Privacy begins when another person trusts you with information.

GDPR is not a collection of website documents. It is a structure for deciding what information is necessary, why it may be used and who remains responsible.

01Purpose02Access03Accountability

This page is for you when

Start with the event, not the legal vocabulary.

Your website, newsletter or client process collects personal data without a clear structure.

A client, collaborator, platform or supplier expects you to sign a data-processing agreement.

Someone requests access, correction or deletion or a device, account or file has been exposed.

The decisive question

What data is being used, for which purpose and can that choice be justified?

Small scale does not remove responsibility. It should, however, influence proportionality. The correct privacy structure begins with the real processing activity, not with a generic document copied from another business.

✓Map actual data flows
✓Identify purpose and legal basis
✓Limit access and retention
✓Make responsibilities and notices consistent

What 4URight does

Build the minimum structure the real activity requires.

We translate privacy duties into decisions, documents and controls appropriate to freelancers, creators, agencies and small digital businesses.

Privacy baseline

Identify what is processed, why, by whom and which essential measures are missing.

↳

Notices & transparency

Explain data use in language that corresponds with the actual service and audience.

↳

Processors & sharing

Allocate responsibility when platforms, suppliers, clients or collaborators handle data.

↳

Cookies & marketing

Assess tracking, analytics, newsletters, consent and the practical website configuration.

↳

Incidents & requests

Create a proportionate response to data incidents and individual privacy requests.

↳

What the work produces

A privacy structure proportionate to the real business.

The objective is not the largest possible compliance file. It is a coherent record in which practice, responsibility and explanation agree.

Processing map

What data enters, where it goes, who can reach it, why it is used and when it leaves.

Responsibility map

Controller, processor, joint responsibility and supplier roles made explicit.

Essential documents

Notices, agreements, consent language, records or response procedures selected by need.

Priority controls

A sequenced list of practical corrections based on exposure, impact and proportionality.

← Back to all rights

Privacy is not paperwork added after the business is built. It is the discipline of knowing what you hold about another person and why.

Describe your situation →