SERVICE TERMS · UPDATED 1 OCTOBER 2026
Terms for using GDPRFix
These terms cover GDPRFix scans, accounts, paid audits and website fixes. Paid services are for customers buying for their business, trade or profession, including sole traders. They are not offered for personal or household purchases. A saved fixing request is not confirmation that work has started.
Privacy contact · Make a privacy complaint · Complain to the ICO
Full report only
The full report costs £20 once for one website and an automated scan of up to 500 discoverable public pages. It includes a downloadable PDF, findings, captured evidence and suggested fixes. Manual inspection and implementation are not included. Login-only, blocked and undiscoverable pages cannot be tested. Resource and observation limits apply, and the report states actual tested coverage. Large scans can take several hours. Payment is taken before the scan begins. No VAT is charged.
Who operates the service
Alex Player, trading as Nexus Websites operates GDPRFix. Contact hello@gdprfix.org. Business address: 18 Lower Marsh Lane, London, KT1 3FE. GDPRFix is independent of the ICO and is not a law firm or certification body.
What you are requesting
Submitting a public website address requests a bounded automated browser assessment. The free scan covers up to two pages where they can be reached. A report contains observations, evidence, suggested actions and testing limitations. A blocked site or unsupported interface can prevent a test from completing; no particular finding or complete coverage is promised.
Responsible use
Use the service for legitimate website assessment. Submit only public HTTP or HTTPS addresses. Do not include passwords, access tokens, private links or unnecessary personal information. Do not attempt to bypass access controls, reach private networks, overload websites, evade service limits or use findings to harass others. We may restrict requests or accounts used for those purposes.
Permission for changes
A scan does not authorise us or you to modify another person’s site. The scanner does not log in, purchase, submit complaints or send chatbot messages. Website changes require your authority and an explicitly agreed scope. Access to your website is separate from the public scan.
Your report and its limitations
You may use and share the report with your website team for investigation and remediation. Keep its date, scope and limitations with it. Do not present a result as regulatory certification, a guaranteed legal conclusion or evidence about pages and situations it did not test. You remain responsible for deciding whether a change is appropriate; seek suitable legal advice where the legal position is unclear.
Private access and sharing
Guest reports are linked to the requesting browser; account reports require authorised access. If you enable link sharing, anyone with that link can read the report and evidence. Share only with intended recipients. Do not send sign-in links or session credentials to other people. Contact us promptly if you believe access has been compromised.
Availability and retention
We do not promise uninterrupted availability or a particular response time. Reports expire after 30 days; download or copy information you need before expiry where those options are available. Access may be interrupted by maintenance or faults. A scan result is not a backup of your website.
Prices and payment
The full report costs £20 and tests up to 500 discoverable public pages, subject to access and testing limitations. It does not include website changes. We are not VAT registered and do not charge VAT. Website fixing prices are £200 for 1–20 public pages, £400 for 21–60 and £600 for 61–300, for one website. Websites with more than 300 pages require a custom quote; fixed-band discounts do not automatically apply to custom work. Our launch offer (at least 50% off) reduces these standard rates to £99, £200 and £300 for new fix plans quoted at the offer price. Previously agreed quotes retain their approved total. These are GBP totals; converted display prices are estimates and checkout confirms the exact payable amount and currency. The operator checks the total website size and proposed changes before you approve the scope. Optional third-party licences, ongoing maintenance and unrelated changes are excluded unless expressly agreed. Payment must be confirmed before work is scheduled or starts. The free two-page scan does not determine the size of the website.
Preparing and delivering the work
Before work begins, make and confirm a current, restorable backup of your website files and database. Give us only the temporary access needed for the agreed changes. Preferred dates are requests; the operator confirms the work date. Delivery can include custom code, a custom plugin or configuration changes within the approved scope. We provide a completion report and a retest, then ask you to review and sign off or request another look. Automated retesting covers up to 500 discoverable public pages; the report must state actual coverage, any manual checks and unresolved limitations. Sign-off accepts the delivered work and is not legal certification. Remove temporary website accounts after the work finishes.
Cancellation and service problems
Contact hello@gdprfix.org with your order reference to cancel, reschedule or report a delivery problem. Paid automated audits start after payment; if a technical failure prevents us supplying a usable report, we will offer a rerun or refund. A report finding no issues is not a delivery failure. For website fixes, cancellation before work begins receives a full refund. If you cancel after work begins, we will explain the work completed and refund the unused part of the fee; charges will not exceed the agreed total. If we cannot deliver the agreed scope, we will offer an agreed alternative or refund for undelivered work. We will acknowledge cancellations and confirm any refund in writing. Nothing here limits rights that cannot lawfully be excluded.
Problems and complaints
For a missing report, incorrect observation or service concern, email hello@gdprfix.org with the report reference, date and a short explanation. Do not attach passwords or unnecessary sensitive data. Privacy complaints use the separate privacy-complaints procedure. We will review reported errors; a technical disagreement does not automatically mean the website is compliant.
Rights and future terms
We provide services with reasonable care and skill. Nothing in these terms excludes liability that cannot lawfully be excluded, including fraud or death or personal injury caused by negligence. English law governs our business contracts and the courts of England and Wales have jurisdiction, subject to mandatory law. The terms and agreed scope in force when you pay apply to your order; later updates do not retrospectively change that agreement. Reports and fixes are technical services, not a guarantee against complaints, fines or future website changes.
Official guidance: Privacy information · Complaint handling · Cookies and storage