Compliance

How I build websites that meet modern compliance standards.

Accessibility, privacy and consumer law are not extras I sell you later. They are part of how the site gets built, because a website that quietly breaks the rules is a liability dressed up as a brochure.

01

Website Accessibility (ADA & WCAG)

Every site I build targets WCAG 2.2 AA as a baseline, not as an afterthought bolted on with an overlay widget. Overlays get businesses sued; real markup does not.

That means proper heading order, real buttons and links instead of clickable divs, visible keyboard focus, labelled form fields, alt text on every meaningful image, and colour contrast checked against the actual palette rather than guessed.

I test with a keyboard, a screen reader pass, and an automated audit before launch, and I hand you the report so you have a record of the effort.

02

Privacy Policies

Your site gets a privacy policy that describes what you actually collect, why you collect it, how long you keep it, and who else can see it. Generic copied policies are worse than none, because they describe processing you never do.

I map the data flows first (forms, analytics, chat, booking, payments), then write the policy against that map. If your business needs a lawyer's review, I will say so plainly rather than pretend a template is legal advice.

03

Cookies & Consent

Nothing that tracks a visitor fires before they say yes. Consent is stored, honoured across pages, and easy to change later from a link in the footer.

The banner offers a genuine reject option with the same weight as accept, because pre-ticked boxes and hidden reject buttons are exactly what regulators fine businesses for.

04

Data Collection

I collect the minimum a form needs to do its job. No hidden fields, no silent profiling, no third party pixels you did not ask for.

Form submissions travel over HTTPS, land somewhere you own and control, and can be deleted on request. If you need retention limits or export on demand, I build that into the workflow.

05

Email & Anti-Spam Laws

Signup forms use real opt-in, not a pre-ticked box hidden under a submit button. Every marketing email carries a working unsubscribe link, an accurate sender name, and a postal address where the law requires one.

This covers CAN-SPAM in the US, CASL in Canada, PECR and UK GDPR in Britain, and the Spam Act in Australia. Unsubscribes are honoured immediately, not in ten business days.

06

Consumer Protection

Claims on your site should be things you can back up. I will not write a fake countdown timer, a fabricated review, or a statistic nobody can source.

Pricing, delivery timelines, guarantees and cancellation terms get stated clearly and placed where a customer sees them before they commit, not buried in a footer link.

07

E-commerce Requirements

Stores need more than a checkout button. Total price including tax and shipping shown before payment, a clear order confirmation, refund and returns terms a customer can find in two clicks, and secure payment handled by a processor like Stripe or PayPal rather than anything homegrown.

Card details never touch your server. Order data stays inside the platform you already control.

08

Country-Specific Requirements

United States

ADA Title III accessibility expectations, state privacy laws such as CCPA and CPRA in California, and CAN-SPAM for email. State laws keep expanding, so policies are written to be updated, not frozen.

Canada

PIPEDA for personal information, CASL for email and electronic messages, and AODA accessibility rules for organisations operating in Ontario.

United Kingdom

UK GDPR and the Data Protection Act for personal data, PECR for cookies and marketing, and the Equality Act, which is the practical driver behind accessible websites.

Australia

The Privacy Act and Australian Privacy Principles, the Spam Act for email and SMS, and Australian Consumer Law for claims, pricing and guarantees.

Frequently asked questions

It makes your website built to the standards these laws are based on, and it removes the common technical failures that get businesses in trouble. I am a developer, not a lawyer. For regulated industries or high risk claims, have your policies reviewed by a solicitor and I will implement whatever they hand back.

Want your current site checked?

Send me the URL and I will send back a plain-English list of what is broken and what it would take to fix. No charge for the audit.

Email me the URL