PROFESSIONAL SERVICES
Choose the work your organisation needs: a readiness assessment, implementation, ongoing support or a defined specialist service.
DEFINED REVIEW
Find out what is working, what needs attention and what your teams need to do next.
IMPLEMENTATION PROJECT
Put the required documents and working procedures in place with your HR, IT and business teams.
ONGOING SUPPORT
Give your team a regular point of contact for privacy advice, reviews and management reporting.
ADDITIONAL SCOPE
Add a defined piece of work when it is needed and is outside the scope already agreed.
ASSESSMENT & IMPLEMENTATION
Confirm the fit and boundaries in discussion. Where an implementation package includes an assessment, that work is not charged again.
When you need an evidence-based starting point.
Interviews, record review, gap register, prioritised roadmap and management briefing.
A defined review. Implementation is agreed separately.
One entity with a limited digital footprint.
Assessment, basic inventory, notice and consent review, rights/grievance and breach procedures, one awareness session and 30 days of support.
One entity, one website or app, up to five departments and five vendors.
An organisation needing a coordinated privacy programme.
Detailed mapping, notices and consent framework, retention, rights workflow, breach plan, vendor reviews, two training sessions and 90 days of support.
One entity, up to three websites or apps, eight departments and ten vendors.
Complex operations requiring a tailored scope.
Enterprise data flows, governance, processor review, technical-control mapping, relevant impact-assessment planning and leadership reporting.
Scope after discovery. This package does not determine Significant Data Fiduciary status or make a statutory appointment.
ONGOING SUPPORT
Agree the officer or privacy-contact mandate, internal counterpart and reporting line before choosing a plan.
Up to 4 advisory hours per month
Monthly advisory call, regulatory update, limited document review and quarterly compliance review.
Up to 8 advisory hours per month
Compliance calendar, policy and evidence maintenance, vendor guidance, rights-request support and quarterly management reporting.
Up to 20 advisory hours per month
Named compliance lead, priority advisory, governance reporting, impact-assessment coordination, incident-readiness support and quarterly leadership review.
Retainers run for a minimum of six months and are billed quarterly in advance. A formal statutory DPO appointment requires review of the applicable requirements and notification; an advisory plan alone does not establish that appointment.
SPECIALIST WORK
Each item is scoped separately when it falls outside the work already agreed.
| Service | Scope |
|---|---|
| Virtual awareness session | Up to 90 minutes for up to 50 participants. |
| On-site awareness workshop | Up to three hours for up to 50 participants; approved travel is separate. |
| Vendor / DPA review | One standard agreement and one review round. |
| Additional privacy notice | One website, application or collection journey. |
| Standard impact assessment | One defined processing activity; scope confirmed before work begins. |
| Complex impact assessment | A separately scoped review for higher-risk, children’s-data or regulated processing. |
| Breach-response exercise | A two-hour facilitated exercise and findings note. |
| Additional legal entity | Extend an agreed implementation package to another entity. |
| Additional advisory capacity | Pre-approved work outside the included project or monthly hours. |
SOFTWARE TOOLS
Separate from the professional services above.