Home / Services / Privacy Gap Analysis

Services

Privacy Gap Analysis

Find the privacy notice and personal information handling gaps on your website before they become a problem. We review the way you collect, store and share data, then give you a clear action list for POPIA alignment and better customer trust.

Privacy Gap Analysis

What We Check Across Your Website

Our privacy gap analysis looks at the full customer journey, from first visit to final follow-up. We check the pages, forms and system prompts that collect personal information, then compare them against the way your business actually uses that data. This matters for South African businesses that handle enquiries, online payments, bookings, newsletter signups, client accounts or staff details, because a privacy notice on its own is not enough.

We review the wording that appears on your site and the practical handling behind it. That includes whether the consent language is clear, whether the right notices are visible at the point of collection, and whether your policy reflects what happens in your business day to day. If your team uses more than one platform, or different people answer enquiries in Gardens, Cape Town CBD or remotely, we also check for mismatches that can leave gaps.

  • Website privacy notice review against actual data practices
  • Contact, booking and checkout forms
  • Cookie and tracking disclosures where relevant
  • Newsletter sign-up wording and consent capture
  • Data sharing with service providers, payment processors and couriers
  • Retention, deletion and access request references

What You Receive at the End of the Review

You get a practical findings pack, not a pile of legal jargon. We set out what is working, what needs changing and which items are most urgent. The focus is on clear website wording and personal information handling that can be put into place by your team without confusion.

The output is designed for entrepreneurs, small businesses and larger teams that need a clean action plan. We can also flag where your current privacy notice needs a full rewrite, where your forms need extra consent language, and where your back-end process should be tightened up. If you are in a regulated sector, or if your site serves customers across South Africa, we will note the extra points that usually need attention.

  • Gap summary with priority levels
  • Page by page notes on privacy wording
  • Form wording and consent recommendations
  • Data handling issues linked to POPIA alignment
  • Suggested follow-up for policy updates or a full policy pack
  • Practical notes for internal teams, if needed

How the Privacy Gap Analysis Runs

The process is straightforward. First, you send us the website details and any existing privacy documents. Then we review the live pages and the points where personal information is collected or disclosed. If we need clarity on how your business handles certain data, we will ask a short set of questions so the findings match your actual setup.

We then prepare a written report with the gaps and our recommended next steps. For businesses with ecommerce, bookings or subscription features, we pay close attention to checkout flow, account creation, automated messages and recurring billing notices. If your site is used from Cape Town, Bellville, Stellenbosch, Paarl or elsewhere in the country, we work remotely and keep the process easy to manage.

  • Step 1: Submit your site and existing documents
  • Step 2: We review pages, forms and disclosures
  • Step 3: We check how personal information is collected and used
  • Step 4: You receive the gap report and action list
  • Step 5: Optional support for updates, rewrites or ongoing checks

Key facts

ScopeWebsite pages, forms, policy wording, consent points and data handling notes
TurnaroundUsually 3 to 5 working days, depending on site size and complexity
Pricing approachFixed fee for standard sites, with scoped pricing for larger or multi-site reviews
Best forBusinesses needing POPIA alignment, privacy notice checks or launch readiness
Maintenance intervalReview every 6 to 12 months, or after site changes, new forms or new service providers
CoverageCape Town and nationwide support for South African businesses

What our Website Compliance customers say

Verified Google reviews

Questions we get asked

Is this only for businesses that already have a privacy policy?

No. We can review an existing privacy policy, or assess a site with no clear privacy notice and show what needs to be added first.

How often should the privacy gap analysis be repeated?

We usually recommend every 6 to 12 months, and sooner if you add new forms, payment tools, tracking scripts, booking systems or customer portals.

Can you help if our website and internal process do not match?

Yes. That is exactly what this service is for. We identify the mismatch and show where the wording or process needs to change so your site and your operations line up.

Planning something? Send the team a message.

Contact form