EU GDPR Website & E-Commerce Compliance Toolkit
EU GDPR Website & E-Commerce Compliance Toolkit
An editable GDPR toolkit for websites and online stores: the public notices, cookie and consent wording, and internal records a small online business needs.
Couldn't load pickup availability
Written and reviewed by practising specialists. Who writes this
Built and reviewed with our methodology. Read it
By document type
| Category | Files |
|---|---|
| Manuals | 6 |
| Policies | 3 |
| Procedures & SOPs | 13 |
| Plans & Programmes | 1 |
| Forms & Records | 70 |
| Checklists & Audit Tools | 120 |
| Registers, Logs & Matrices | 48 |
| Guides & Work Instructions | 2 |
| Tools & Workbooks | 2 |
| Other Documents | 18 |
Key documents
| Reference | Document | Format |
|---|---|---|
| AGS-GDPR-WEB-POL-001 | Cookie and Tracking Technology Policy | Word |
| AGS-GDPR-WEB-PRO-003 | Cookie Compliance Procedure | Word |
| AGS-GDPR-WEB-PRO-009 | E-Commerce Privacy Procedure | Word |
| AGS-GDPR-WEB-NOT-003 | E-Commerce Customer Privacy Notice | Word |
| AGS-GDPR-WEB-FRM-010 | Website Consent Form | Word |
| AGS-GDPR-WEB-REG-015 | Cookie Inventory | Excel |
- Need the complete document list? Request it — same day
- Want to check the quality first? Preview free samples
Overview
A small online business meets the GDPR mostly through its website: the privacy notice, the cookie banner, the checkout and the marketing sign-up. This toolkit covers those points without the weight of a whole-organisation programme. Public-facing wording is kept apart from internal records, so you can see what is published and what is kept as evidence.
It runs from website scope, data mapping, a simplified website record of processing and lawful-basis assessments to cookies, digital marketing, e-commerce processing, providers, transfers, rights, retention, security and breach. Cookie compliance is a repeatable method for a small team, including verification that cookie blocking works on the live site.
Scope is deliberately narrow. Employee data, large-scale profiling, full DPIAs and binding corporate rules are outside it. The toolkit rests on Regulation (EU) 2016/679 (GDPR) and the ePrivacy Directive 2002/58/EC as amended by Directive 2009/136/EC, with European Data Protection Board guidance cited. National ePrivacy law is left to you. AGS is independent and is not affiliated with the European Data Protection Board or any supervisory authority. Regulations are referenced by citation.
What this system covers
- Website records: scope, data mapping, a simplified website ROPA and lawful-basis assessments.
- Website notices: model notices for websites, including an e-commerce customer privacy notice.
- Cookies and consent: a cookie policy, banner and preference-centre wording, consent wording, and a cookie compliance policy and procedure with verification records.
- Marketing and e-commerce: digital marketing, and processing for orders, payments, fraud checks, returns, wish lists and loyalty schemes.
- Providers and transfers: records for service providers and international transfers.
- Rights: data subject rights with response letters and assessments.
- Protection: retention, security and breach, privacy by design and children's data.
- Readiness: change control, self-assessment and a readiness scorecard.
Who it's for
Small businesses, micro-enterprises and start-ups with a website, online retailers including stores on hosted platforms, subscription, booking and enquiry sites, service providers, clinics and hotels. The developers and privacy consultants who support them can use it too.
For an organisation-wide programme, see the EU GDPR Core Management System. Requests from individuals are covered in depth by the EU GDPR Consent & Data Subject Rights Management System.
Everything you get
Every toolkit gives you a full set of working documents for your standard, ready to edit and use.
Native Microsoft files. Add your logo and adapt every document to how you work.
Your full toolkit arrives as a ZIP the moment payment clears.
One purchase covers everyone in your organisation. No per-seat fees.
Built by people who run real audits, so the content matches what assessors check.
One payment, perpetual licence for your organisation. No subscriptions, no renewals.
Full refund if your files are faulty, incomplete or not as described and we can't put it right
Frequently asked questions
What exactly do I receive?
A downloadable ZIP containing the full set of ready-to-use documents for this toolkit — manuals, procedures, forms, records, checklists, guidance and training material, all in editable Word and Excel format. The exact document count is shown at the top of this page.
Are the documents really editable?
Yes. Every file is native Microsoft Word or Excel — no locked PDFs. Add your logo, change wording, and tailor the content to your organisation. The toolkit is yours to keep and reuse.
Does this certify my organisation?
No. These are documentation toolkits aligned to the relevant standard to help you prepare. Certification itself is issued by an accredited certification body after their audit. Our toolkits give you a strong, audit-ready starting point.
How is it delivered?
Instantly and digitally. There's no physical shipment — you download the files right after payment and receive a backup link by email.
Do I get updates?
Yes. If we revise this toolkit, you're entitled to the updated version at no extra cost — just contact us with your order details.
What is your refund policy?
These are digital products, so once a toolkit has been downloaded we cannot take it back. If you have not downloaded yet, contact us and we will cancel the order and refund you in full. We also refund in full if the files are damaged, incomplete, or not what the product page described.
Cannot find your standard?
Tell us which scheme you work to. We will point you to the right toolkit.
More in EU Compliance
See all 15
EU GDPR Data Protection Officer (DPO) Management System
EU Compliance282 documents $850USD
EU GDPR Privacy & Data Protection Awareness Training Package
EU Compliance337 documents $850USD
EU GDPR Data Protection Impact Assessment (DPIA) Management System
EU Compliance271 documents $850USD