The Digital Back Office
Website Compliance Checklist
The boring-but-important stuff that keeps your website on the right side of the line. Work through it, tick the boxes, and hand the hard parts to someone who watches them for you. This is a starting point, not an exhaustive list — what actually applies depends on your business, what you collect, and where you operate.
Core Pages
- Privacy policy is published and easy to find.
- Terms and conditions / terms of service are published.
- Contact information is accurate and current.
- Refund, shipping, or service policies are included if relevant.
Privacy & Data
- Data collection is clearly explained.
- Visitors are told what information is collected.
- How collected data is used is disclosed.
- Data sharing with third parties is explained.
- Data retention or deletion language is included if needed.
- Cookie usage is disclosed.
Regional Requirements
- Extra legal language added for any regions you serve.
- Location-specific privacy rights addressed where required.
- International visitors covered if you collect their data.
- Cookie consent language updated for European visitors if applicable.
- Local consumer-protection or advertising rules reviewed if relevant.
Cookies & Tracking
- Cookie banner is enabled if required.
- Non-essential cookies don't load before consent where needed.
- Users can accept, reject, or manage cookie preferences.
- Cookie policy explains what tools are being used.
- Tracking pixels and analytics are listed clearly.
Email Outreach
- Sender name and email address are accurate.
- Subject lines are truthful and not misleading.
- Marketing emails include a physical mailing address.
- Every promotional email includes an unsubscribe link.
- Opt-out requests are processed promptly.
- Mailing lists are kept updated and cleaned regularly.
Site Maintenance
- Policies are reviewed on a regular schedule.
- Legal language is updated when tools or services change.
- New forms, lead magnets, or email systems are added to policies.
- Third-party integrations are checked for compliance.
- Old or outdated legal pages are removed or refreshed.
The "Don't Be That Person" List
- Don't copy legal pages from another site and hope for the best.
- Don't hide privacy information in a random footer graveyard.
- Don't collect data you can't explain.
- Don't send marketing emails without an easy opt-out.
- Don't assume one policy fits every region.
Not exhaustive, and not legal advice. This is a general starting checklist, not a complete list of every requirement — what applies to you depends on your specific business, what data you collect, and the places you operate. The Digital Back Office builds and manages websites and is not a law firm. For requirements specific to your situation, talk to a licensed attorney.