Chapter 1 of 7
Is your business UK compliant?
UK data protection has 9 obligations under GDPR. Most businesses miss several.
“After the TalkTalk breach, I started getting scam calls from people who knew my name, address, and account details. They sounded completely legitimate. I nearly fell for it.”
— Affected customer, TalkTalk breach (2015). This is what happens when businesses get data protection wrong.
Chapter 2 of 7
Your business has 9 data protection obligations.
Click each one to see what it means — and what happens to real people when businesses get it wrong.
Obligations marked We solve are handled by our AI agents — you review and approve. All enforcement cases link to published ICO sources.
Chapter 3 of 7
The real cost of doing compliance manually
Compliance isn't a one-off task. Here's what a typical year looks like without automation.
A customer asks: "What data do you hold on me?"
- You have 30 days to respond — legally binding
- Without a process, finding the data takes 30+ hours
- Miss the deadline and it becomes a separate infringement
New app installed. Privacy notice outdated.
- A new Shopify app needs a Data Processing Agreement
- Your privacy notice no longer matches what you actually do
- A vendor updates their T&Cs — your DPA may be void
Cookie scripts changed since last audit.
- A theme update added new tracking scripts
- Your consent banner no longer covers all cookies
- Retention periods for customer data need reviewing
Everything above repeats — plus more.
- 3 new apps installed, each needing a DPA review
- 2 vendor contract changes requiring updated agreements
- A regulatory update changes what you must disclose
- The compliance work compounds with every passing month
28–55 compliance events have occurred.
- Each event needed manual review, documentation, or action
- Without automation, this is a part-time job on top of running your business
- One missed event is all it takes for an ICO complaint to escalate
The Real Cost
The real cost isn't fines — it's the hours you spend on compliance instead of growing your business.
Based on our analysis of compliance trigger frequency across 9 obligation areas.
Chapter 4 of 7
The real problems aren't penalties.
Click each card to flip it and see what actually happens when compliance fails.
Use keyboard Enter or Space to flip if using assistive technology.
Merchants don't buy compliance tools because they're scared of fines. They buy them because compliance is complicated, time-consuming, and expensive— and they want it handled automatically.
Chapter 5 of 7
Here's what we solve.
Drag the sliders to see the before and after for the 4 highest-impact obligations we automate.
Privacy Notice
Drag to toggle before / after
After
- AI-generated in under 2 minutes
- Zero solicitor fees
- Includes GDPR, ICO, and retention details
- Ready to publish immediately
- Near-zero compliance risk
Data Retention
Drag to toggle before / after
After
- Automatic retention schedule built from your data types
- Zero consultant fees
- Automated quarterly review alerts
- Risk surface shrinks automatically over time
- Compliant by default
Vendor DPAs
Drag to toggle before / after
After
- Auto-detected from your Shopify app list
- DPA templates generated for each vendor
- Alerts when vendor terms change
- Full vendor data map in one dashboard
- Near-zero compliance risk
Cookie Consent
Drag to toggle before / after
After
- Automatic cookie scan detects all trackers
- Pre-built PECR-compliant banner deployed instantly
- Alerts when new cookies appear
- No developer time needed
- Compliant from day one
The remaining 5 obligations require human judgement and deeper legal analysis.
We're building them into Phase 2 & Phase 3 — shaped by beta merchant feedback.
Chapter 6 of 7
Your business is now safe.
This is what compliance confidence feels like — before and after GuardianStack.
Before
After
Example compliance scores — your actual score is calculated from your scan results.
Before
- Anxiety: "Am I compliant?"
- Estimated 15+ hours/month on manual compliance tasks
- Ongoing compliance costs (£283–£775/month consultant-equivalent)
- DSAR pile-up, vendor chaos
- No incident plan, no visibility
Based on our analysis of compliance burden across 9 obligation areas. Cost estimate: £3,400–£9,300/year consultant-equivalent (Vision Anchors).
After GuardianStack
- Clear compliance evidence pack — ready if the ICO ever asks
- 28–55 compliance events/year handled automatically
- Continuous protection — not a one-off audit
- Clear processes, all vendors visible
- Breach playbook ready, ICO finds you prepared
Exposed
Protected
Stressed
Confident
Chaotic
Organised
Liability
Peace of Mind
Chapter 7 of 7
The beta starts now.
GuardianStack solves the 4 highest-leverage obligations. The remaining 5 require more complexity and human judgement — your feedback shapes what we build next.
You get
- Peace of mind on 4 highest-impact obligations
- 28–55 compliance events/year detected and handled automatically
- Clear compliance evidence pack — ready if the ICO ever asks
- Input on GuardianStack's product roadmap
- 50% discount on Pro tier during beta period
- Lifetime discount locked in as an early adopter
Your help gets
- GuardianStack improves faster with your feedback
- Every UK Shopify merchant benefits from your input
- We build what you actually need — not what we assume
4-Phase Roadmap
Phase 1
Now — Month 6
4 AI agents covering 5 core obligations.
Phase 2
Months 7–10
Persistent memory, proactive monitoring. Agents 5–6.
Phase 3
Months 11–14
All 9 obligations covered. Accountant partner programme.
Phase 4
Months 15–18
Employment law expansion. Platform becomes compliance OS.
No credit card required for the free scan. Beta pricing locked at install — never increases.