Cybersecurity & Digital Protection · Governance

Data Protection Review

A practical look at what customer information you hold, where it sits and who can read it

Buy now

$449USD one-off

One payment. Work starts once we have confirmed your requirements.

The four questions this page answers

  1. 1

    What you buy

    A one-off remote review of how your business collects, stores and shares information about customers. It is an operational review of your systems and working habits. It is not legal advice, and it does not certify anything.

  2. 2

    What you get

    5 deliverables, listed in full below

    • A written data map showing collection points, systems and onward flows
    • A third-party register naming every tool or supplier that receives customer information
    • A retention and access summary against each store
    + 2 more
  3. 3

    How it is delivered

    Remote Setup

    Carried out remotely by our team. Nothing is posted and no one visits.

    REMOTE SERVICE

  4. 4

    How long it takes

    7–10 business days from receipt of access, including one interview call

    Measured from the point everything under “what we need from you” is with us, not from the moment you pay.

A document management system with folders, versions and approvals — illustrative concept, not a screenshot of a client system
A document management system with folders, versions and approvals. Illustrative interface concept — not a screenshot of a client deployment.

What is this, in plain English?

A one-off remote review of how your business collects, stores and shares information about customers. It is an operational review of your systems and working habits. It is not legal advice, and it does not certify anything.

The output is a data map: every point where customer information is collected, every system and spreadsheet it lands in, every third party it is passed to, and how long it is kept in practice rather than in theory. The findings are practical housekeeping you can act on. Where something touches your legal duties, we say so and tell you to put it to a lawyer.

The problem it solves

Customer details are spread across a website database, a CRM, three inboxes and a shared drive, and nobody can say who holds copies, who can export them or how long anything is kept.

If that does not describe you, this is probably the wrong product. Tell us and we will point you at a better fit rather than sell you the nearest one.

What you get

The concrete things that exist at the end and that you own.

5 deliverables

  • A written data map showing collection points, systems and onward flows
  • A third-party register naming every tool or supplier that receives customer information
  • A retention and access summary against each store
  • A ranked housekeeping action list, each item written as a specific change
  • A note of every finding that we believe needs a lawyer rather than us

What's included

The work covered by the figure in the buy box, at no extra cost.

  • One interview call with your team
  • Data mapping across website, systems and shared files
  • Third-party and processor register
  • Retention and access review per store
  • Consent and privacy-notice touchpoint check
  • Written report and a walkthrough call

Not seeing something you expected? Check what you are not buying before you order.

What does it do?

Everything listed here is delivered as part of this product. Nothing on this list is aspirational.

  • A data map of every collection point on your website and in day-to-day operations
  • An inventory of the systems, spreadsheets and mailboxes the information lands in
  • A list of the third parties that receive or process it on your behalf, and what each one gets
  • Retention recorded as it happens in practice, not as a policy claims
  • Access checked per store: who can read, export or delete each set
  • Consent and privacy-notice touchpoints compared against what the systems actually do
  • Findings written as practical housekeeping actions, ranked by risk

How it works

The delivery sequence from order to handover.

  1. 1

    Interview

    A call with whoever handles enquiries, orders and accounts, because the real data flows are usually informal ones.

  2. 2

    Trace the collection points

    Forms, checkouts, inboxes, phone notes and spreadsheets are followed to wherever the information ends up.

  3. 3

    Map the third parties

    Every tool and supplier that touches the data is listed, along with what each one actually receives.

  4. 4

    Check access and retention

    We look at who can reach each store and how long anything survives in it before it is deleted, if ever.

  5. 5

    Report and walk through

    You receive the data map and the action list, and we go through it on a call.

Delivery & fulfilment

Stream Edge Solutions ships nothing. Every package on this site is carried out and handed over remotely — this is exactly what happens after you order.

REMOTE SERVICEHow this is delivered
  1. 1We confirm requirementsWe read what you sent with the order, come back in writing with anything missing, and agree the scope before any chargeable work starts.
  2. 2We build and configure remotelySetup, configuration and testing are done by our team over a remote connection — on your systems or on ours, whichever the package specifies.
  3. 3We hand it overYou receive the working setup, the credentials, the documentation and a walkthrough. Everything built for you is yours at handover.

Carried out remotely by our team. Nothing is posted and no one visits. Typical turnaround: 7–10 business days from receipt of access, including one interview call.

Delivery method
Remote Setup
Expected delivery time
7–10 business days from receipt of access, including one interview call
Measured from the point everything under “what we need from you” is with us — not from the moment you pay.

Full detail of how work is handed over, what happens if requirements are outstanding and how order records are kept is in the Delivery & Fulfilment Policy.

What we need from you

Nothing starts until these are in place, and the turnaround above is measured from that point — not from the moment you pay.

  • Read access to the systems holding customer information
  • Time with whoever actually handles enquiries, orders and customer records day to day
  • Your current privacy notice and a list of the suppliers and tools you use
  • A named contact for the walkthrough call

Who this is for

  • Businesses collecting customer details through a website form or online orders
  • Companies that have never written down where customer information ends up
  • Owners who have been sent a supplier data questionnaire and cannot answer it
  • Organisations tidying up before bringing in a lawyer to advise formally

Business needs this addresses: Improve operations, Improve IT infrastructure

What's not included

Just as plainly as the list above: the things this package is not.

  • Legal advice of any kind, including whether you meet a particular statutory duty; that belongs with a qualified lawyer in your jurisdiction
  • Drafting your privacy policy, supplier contracts or data processing agreements
  • Acting as your data protection officer or representative, which we are not appointed or qualified to do
  • Certification or compliance sign-off against any standard or framework, which we are not able to issue
  • Implementing the changes we recommend, which is quoted separately once you have chosen them
  • Subscriptions for any tool we recommend, which you pay that provider directly

Anything outside the scope above is quoted separately, in writing, before it is carried out. Nothing is added to your bill without your agreement.

FAQs

Does this make us compliant?

No, and anyone selling you compliance in a fixed-price review is overselling. Compliance is a legal assessment against the law where you operate, and only a qualified lawyer can tell you where you stand. This review is informed by common data-handling practice; it is not a legal opinion and it certifies nothing.

Can you tell us what the law requires of us?

We will not, because we are not lawyers and getting that wrong would cost you more than the review. What we can do is show you factually what your business does with customer information today, which is exactly the thing a lawyer will ask you for first and which most businesses cannot produce.

What do we actually end up holding?

A data map, a third-party register, a retention and access summary, and a ranked list of practical actions. Most of those actions are ordinary housekeeping: an old export deleted, a shared inbox restricted, a supplier nobody uses any more disconnected. It is the sort of work that is obvious once written down and invisible until then.

What if we want the changes made as well?

They are deliberately not in this price, so the review stays honest rather than becoming a list of things to sell you. Once you have chosen which actions matter, we quote those separately, and several of them you will be able to do yourselves in an afternoon. We will say which ones those are.

Refund & cancellation

What happens if you change your mind, and what happens to money already paid.

Cooling-off before work starts
You have 7 days after ordering to cancel while work has not yet begun. Up to 25% may be retained to cover scoping and scheduling already carried out.
Work already done
Once delivery has started, refunds are assessed against the work completed and the deliverables already handed over — the list under “what you get” above is what that assessment is made against. Approved refunds are processed within 14 days.
If we cannot deliver what is described here
You are refunded. The scope on this page is the scope we are held to, which is exactly why the exclusions above are stated before you buy rather than after.

The full terms, item type by item type, are in the Refund & Cancellation Policy. How the work reaches you is covered by the Delivery & Fulfilment Policy.

Not sure this is the right product?

We would rather point you at the right thing than sell you the nearest one. Ask us before you buy — no obligation.

Related products

Others that solve nearby problems, in case this is not quite the right fit.

Or see all 11 in Cybersecurity & Digital Protection.

Contact us