Your small business website from IONOS comes with an SSL certificate, so your visitors’ data is always protected. Despite this, there are still other rules and regulations that need to be followed. Since 31 January 2020, the UK has had its own version of the GDPR ⁠– the UK General Data Protection Regulation (‘UK GDPR’), tailored by the Data Protection Act 2018. The new regulation means that you have to obtain explicit consent from visitors before you handle their personal data. This can be achieved with cookies and third-party trackers. You must safely store and document every consent and make it very easy for visitors to change their mind and revoke their consent. They also have the right to have their data deleted or amended at any time.
In the UK, you must be transparent with visitors about how their personal data will be used. This can be done with the help of a privacy policy on your website.
Although the General Data Protection Regulation (GDPR) no longer applies to the UK since Brexit, your website will still have to comply if it collects data from visitors in the EU.