Source-Led GDPR Guides

Cold marketing emails in the EU: consent, soft opt-in, and legitimate interests

A practical way to separate GDPR lawful basis from the electronic-marketing rules that decide whether you may send a cold email.

How to write a privacy notice that matches your website

Build an Article 13 or 14 privacy notice from verified facts about purposes, bases, recipients, transfers, retention, and rights.

Can you reuse personal data for a new purpose under GDPR?

Use the purpose-limitation and Article 6(4) compatibility tests before reusing personal data for a purpose that was not originally stated.

GDPR templates: useful starting point or false assurance?

Use a GDPR template as a structured control list, then verify every clause against the live processing, contracts, and technical controls.

Preparing for a GDPR review: build the evidence trail first

Prepare for a customer, regulator, or internal GDPR review by connecting policies to data maps, contracts, controls, and tested procedures.

Article 6 GDPR: choose a lawful basis purpose by purpose

A practical guide to the six Article 6 lawful bases, common mistakes, and the evidence to record before processing personal data.

Does a contact form need a consent checkbox under GDPR?

A contact form needs clear privacy information. Whether it also needs a checkbox depends on the purpose, lawful basis, and data being collected.