Recognition
Do you recognize yourself?
A banner has been added to the site, without any change in actual behaviour.
A client or partner asked about your practices, and the answer was improvised.
You do not know exactly what information your site collects.
A request for access would arrive tomorrow: nobody knows what to do.
Your privacy policy has been copied.
What it costs your business
The gap between what is written in a policy and what the site actually does is the real risk. A tracking tool that is triggered before consent, a form that collects more than necessary, an access request without a process: these are technical, measurable, and correctable situations. Ignoring them exposes the business, and is increasingly noticeable among attentive business customers.
Delivery
THE GXN INTERVENTION
We check what your site actually does, correct any gap with requirements identified by your advisor, and document everything so you can respond, backed by evidence, to anyone who asks.
Decision benchmark
WHAT IS REGULATED ON YOUR SITE
| Type of requirement | Corresponding technical gesture |
|---|---|
| Consent before collection | Banner that actually blocks cookies and scripts up to the visitor's choice |
| Granular choice | Distinct categories (necessary, measure, advertising), separately refused |
| Traceability of consent | Logging of choices, with timestamp |
| Right of access and withdrawal | Functional form and defined processing process |
| Minimization of collection | Review of active third party form fields and tools |
| Transparency | Privacy policy aligned with practices actual of the site |
| Compliant measurement | Analytics configured to respect visitor choice |
Each line is technically verifiable. This is exactly what we measure in the audit.
Decision benchmark
CONSENT AND MEASURE: BOTH CAN COEXIST
A common fear: "If we ask for consent, we lose our data." In fact, a careful configuration retains a largely sufficient decision-making capacity: visitors who accept are measured normally, and modelling mechanisms exist to interpret the rest. You lose individual precision; You keep the ability to arbitrate your budgets. The real risk is not to ask for consent, it is to have a false measure because no one has reconfigured the tools after adding the banner.
Scope
WHAT’S INCLUDED
Technical audit of the site · inventory of active third-party tools · implementation or correction of the consent mechanism · verified effective blocking · logging of consents · access request form · reconfiguration of analytics · review of collection fields · technical documentation.
Process
HOW IT HAPPENS
- 01Evaluation : a first look at the technical condition.
- 02Assessment : complete audit and inventory.
- 03Recommendations : the gap between the current state and the identified requirements.
- 04Execution : technical implementation.
- 05Verification : measurable tests: what should be blocked is blocked.
- 06Ongoing support : reverification at each significant change to the site.
Qualification
GOOD CANDIDATE / LESS GOOD CANDIDATE
For you if: your site collects personal information · you have identified requirements to perform · you want technical evidence, not assertions. Not for you if: you are seeking legal advice · you want a compliance guarantee (it does not exist from a technical provider).
The scope and modalities are specified after the evaluation, before any commitment.
Frequently asked questions
FAQs
01Is our current cookie banner sufficient?
It testifies objectively to whether witnesses testify before consent. The result often surprises.
02Is Google Analytics compliant?
The question is not the tool but its configuration and your management of consent. We implement the technical aspect; legal interpretation is up to your advisor.
03What should we do when someone requests access to their information?
You need a defined process and a technical way to retrieve the information. We are building the technical aspect; the organizational process is defined with your advisor.
04Should we redo our privacy policy?
If it does not match what the site actually does, yes. We document actual practices; The legal drafting is up to your advisor.
Give us your site address. We'll test what actually triggers before consent, and you'll know where you stand.