Free scan · Free AI Disclosure · No account

Find out if your website is breaking the law — in 30 seconds.

Free compliance scan. Instant GDPR + AI risk score. Fix it in minutes.

Includes a free AI Disclosure document — no account needed.

Free to scan. No account needed. Results in ~30 seconds.

Trusted by 2,400+ websites scanned

UK GDPREU GDPRICO awareEDPB awareEU AI Act

flagged.co.uk/scan

Scanning northgatedigital.co.uk...

Example scan · northgatedigital.co.uk

Live preview

Compliance Score

62/100

Needs work

Analysis powered by AI — results are indicative and do not constitute legal advice.

What we found

Privacy policy
Cookie policy
Terms & Conditions
AI disclosure
Cookie banner

Trackers detected: Google Analytics 4, Google Tag Manager, Meta Pixel, Hotjar

Recommendations

1.Publish a dedicated Cookie Policy that categorises each tracker (strictly necessary, analytics, marketing).
2.Add an AI usage / transparency disclosure covering ChatGPT and other AI tools used with customer data.
3.Update the Privacy Policy with explicit lawful bases, retention periods, and transfer mechanisms.
4.Configure your cookie banner to block non-essential trackers (Meta Pixel, Hotjar) until consent is granted.
5.Add a clear data-subject-request workflow (email + response SLA) to your Privacy Policy.

Policy audit

We read your existing policies and checked them against a GDPR (UK & EU) compliance checklist.

Privacy Policy

northgatedigital.co.uk/privacy

Covers the basics of data collection and contact details, but several GDPR-required disclosures are missing or vague.

No explicit lawful basis listed for each processing activity (Art. 6 GDPR).
Data retention periods are not specified — only 'as long as necessary' is stated.
International data transfer mechanism (SCCs / UK IDTA) is not disclosed.
Data subject rights are listed but the process to exercise them is not described.

Terms & Conditions

northgatedigital.co.uk/terms

Reasonable coverage of service usage and liability, with a few consumer-rights gaps for UK & EU customers.

No 14-day right-to-cancel notice for EU/UK consumers (Consumer Rights Directive).
Governing law clause is present but does not preserve mandatory consumer protections.

AI Compliance & Usage Risk

Optional: describe how your site uses AI (chatbots, content generation, automation). We'll assess transparency risk.

Risk Score

64/100

Medium Risk

The site uses an AI chatbot for customer support and GPT-based drafting for blog content, but has no AI disclosure published — creating a transparency gap under UK & EU GDPR.

Key issues

No AI transparency disclosure is published on the website.
Chatbot may process personal data (names, emails, support queries) without a documented lawful basis.
Privacy Policy does not mention automated processing or AI-assisted decision-making.
Customers are not informed when they are interacting with an AI rather than a human.

Recommended fixes

Publish an AI transparency disclosure that names the tools used (chatbot, GPT) and their purpose.
Add a clear 'You're chatting with an AI' notice at the start of every chatbot session.
Update the Privacy Policy with the lawful basis and retention period for AI-processed data.
Ensure no special-category data is sent to third-party AI providers without explicit consent.

Copy-ready AI transparency disclosure

We use artificial intelligence tools to assist with customer support (an AI chatbot) and to draft marketing content (GPT-based writing assistants). These tools may process limited information you provide, such as your name, email address and the content of your messages. We review AI outputs before publication and do not use AI to make automated decisions that produce legal or similarly significant effects. You can request human review of any AI-assisted interaction at any time.

Unlock with Starter

Privacy Policy

This policy explains how Example.co.uk collects, uses and protects personal data when you use our website. We are the data controller for the information described in this notice.

We collect personal data such as names, email addresses, account credentials, order details and any information submitted through our website forms.

Our lawful bases for processing are consent, contract performance, legal obligation and legitimate interest, documented per processing activity.

We may share personal data with processors who help us deliver our services, including hosting, analytics and payment providers.

International transfers are protected using Standard Contractual Clauses and the UK International Data Transfer Addendum.

Personal data is retained only for as long as needed for the purpose it was collected, including legal, accounting and support requirements.

You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data.