Service 01
You collect data. You may not know exactly what, where it goes, or which laws apply. This engagement builds the foundation — a documented privacy program, accurate policies, and the processes to back them up.
What's Included
The Foundational Privacy Setup builds the documentation and processes every business needs in place before anything else. It is a bounded project with a clear start and a defined end.
Most businesses don't have a privacy problem — they have a documentation problem. The data practices are often reasonable. What's missing is the written evidence that those practices exist.
Engagement Summary
Privacy Policy
A legally structured, plain-language privacy policy drafted for your specific business and state exposure. Not a template copied from someone else's website — a policy that accurately reflects what you actually collect, why, and how consumers can exercise their rights.
Applicable Law Analysis
A clear breakdown of which US state and federal privacy laws apply to your business and why — based on your revenue, consumer record volume, data footprint, and the states where you have customers and employees.
Data Inventory
A documented map of what personal data you collect, where it comes from, how it is used, who you share it with, and how long you retain it. The foundation for every other privacy decision you will make.
Consumer Rights Process
Written procedures for handling access, deletion, correction, and opt-out requests — including response timelines, identity verification steps, and templates for common request types.
Vendor DPA Checklist
A review of your key vendors with a checklist of which ones require Data Processing Agreements and a ready-to-use DPA template for standard vendor categories.
30-Day Support Window
Thirty days of email support after delivery for questions, clarifications, and minor updates as you implement. You will not be left to figure it out alone after handoff.
Common Questions
How long does this take?
Most engagements complete within 3–4 weeks from kickoff, depending on your availability for the intake interview and document review. The bulk of the work happens on our end.
Do I need to prepare anything?
A list of your key vendors, a sense of what data you collect and why, and access to your current privacy policy if you have one. We will work through the rest together during the intake call.
Will this cover all the states I operate in?
Yes. The applicable law analysis covers every state where you have customers or employees and determines which laws apply to your specific situation. Coverage is not limited to one or two states.
What if my business changes after delivery?
The 30-day support window covers minor updates. For material changes — new products, new markets, significant growth — a Gap Analysis or retainer engagement is the right next step.
Is this the right starting point or should I do a Gap Analysis first?
If you have essentially nothing in place, the Foundational Setup is the right starting point. If you have some documentation and want to know where the gaps are before investing in a build, start with the Gap Analysis.
Book a free 30-minute discovery call to discuss your situation and confirm this is the right fit.