Skip to content
M2Seed M2Seed

What your website includes

The legal texts, written for your business and revised when the rules move.

Legal notice, privacy, cookies and a banner where refusing costs exactly what accepting costs. Written once and reviewed every time the rules shift.

The site goes live with a legal notice, a privacy policy and a cookie policy written for that particular business, and with a banner where refusing is as easy as accepting, exactly as the Spanish data protection authority’s cookie guide requires.

Last reviewed:

Three texts, three different sets of rules

They tend to get lumped together as «the legal stuff», and in fact they answer different questions and come from different places:

Refusing has to cost what accepting costs

The cookie guide published by the Spanish Data Protection Agency, updated in May 2024, is the document that sets out what that consent has to look like in practice: given before anything unnecessary is installed, informed, granular and as easy to withdraw as to give. With one very concrete consequence for the design of the banner: the option to refuse has to be as close to hand as the option to accept.

A widespread habit falls with it: «by continuing to browse you accept» no longer works. Consent needs a clear affirmative act, and carrying on reading is not one.

It is exactly what this site’s own banner does, and you can check it right now: two buttons the same size, no pre-ticked boxes and a link to change your mind whenever you like. What we build for clients is this, not something else.

The part everyone forgets: keeping it current

A legal text is not an opening formality: it is a snapshot of how you handle data today. When the rules change — or when you change, and start taking appointments through the site, sending a newsletter or installing new analytics — the text goes stale, and a stale text describes something you no longer do. So the review is included and not billed separately: when something moves, we go through the sites we look after.

What we do not do, so there are no surprises

We do not sell a compliance seal and we are not going to tell you this settles everything. It covers what the website does: a form, some analytics, some cookies, some texts. Your company’s record of processing activities, your contracts with suppliers, staff training or a risk assessment are a different job, usually for a data protection specialist. If you need that, we say so and put you in touch; what we will not do is charge you for it as though it came with the site.

What we do about it

Part of the maintenance: you never have to ask, and it is never billed apart.

  • A legal notice written for you With the real details of the owner, not a template with blanks left in.
  • Privacy policy What data you ask for, what for, on what legal basis and how long you keep it.
  • Cookie policy with its table Each cookie with its owner, its purpose and its lifetime, not one vague paragraph.
  • A banner that really refuses Refusing costs what accepting costs, and you can change your mind afterwards.
  • Forms with their checkbox Express consent and a link to the policy, with nothing pre-ticked.
  • Revision when the rules move If the rules change or your site changes, the texts get gone through.

And this you change with one sentence

You write what you want changed and we publish it.

We are going to start sending a newsletter

We update the privacy policy and the sign-up form with what has to be disclosed.

We have changed our registered address

Changed in the legal notice, in the footer and in the site’s structured data.

I want to know which cookies I actually have

We send you the real list of what your site loads, not the template’s list.

Frequently asked questions

Does this make me GDPR compliant?

It settles the part that depends on the website, which is the part that shows from outside and the part people look at first. What happens inside your company — record of processing, contracts, training — is another job and we say so plainly rather than letting you assume otherwise.

Do I need a cookie banner if I have no analytics?

If there is only strictly necessary storage, no consent is required, though it is worth explaining in the policy. The moment analytics, an embedded map or a video from another platform appears, it is required.

Can I use «by continuing to browse you accept»?

No. Consent requires a clear affirmative act, and continuing to browse stopped counting as one.

What if my business handles health data or data about children?

Then special categories are in play and the website is the easy part. It gets looked at case by case and, if a specialist is needed, we say so.

Who is liable if there is a fine?

The data controller is the owner of the website, that is, your business. Our job is that the texts and the banner are as they should be and that you hear about it when something changes; we cannot take on your liability and nobody serious will tell you otherwise.

Where all this comes from

Every figure and every rule quoted above, linked to the official text.

The rest of what your website includes

Your own domain

Your name on the internet, registered in your name and renewed without you lifting a finger.

Fast hosting

Your site always on, with a secure certificate and loading in under 2 seconds.

Daily backups

Every night we keep a full copy. If something breaks, it is restored in minutes.

Google Business Profile

Your business on Maps with hours, photos and details always up to date.

Local SEO

We optimise your site so people searching near you actually find you.

Bookings and appointments

Your customers book from the site and it reaches your inbox and your phone.

WhatsApp button

One tap and your customers write to you. Where they already are.

When were your legal texts last reviewed?

If the answer is «when the site was built», they probably describe a business you no longer are. We will look at them.

Write to us