Data and privacy · Privacy counsel, marketing lead, web team
Audit a cookie banner against the tracking rules
A retailer's site sets forty-one trackers and its cookie policy describes eleven. The audit reads the tracker inventory against the banner behaviour and the policy, and reports where the three do not match.
- First draft
- A tracker-by-tracker assessment comes back from one run, before the site refresh goes live.
The problem
Step 01 of 05
Load the three sources
The tracker inventory exported from the site, the banner configuration and the published cookie policy go on one matter.
Project Halcyon: SPA warranties and disclosure
Buy-side warranty review, disclosure analysis and cited due-diligence grid.
- Client
- Halcyon Bidco Ltd
- Reference
- WC-2026-0412
- Practice area
- Corporate / M&A
- Jurisdiction
- England and Wales
- Responsible partner
- E. Vance
No conflict check on file.Chat, on this matter
Compare warranties with the disclosure letter.
Three high-priority exceptions require action: the unregistered charge, the change-of-control right and the tribunal claim.
Send a message… (@ to mention tools)BalancedPrepare for- 25 Aug
Disclosure exceptions matrix
Chat
- 21 Aug
Disclosure exceptions matrix
Run · completed · 560 credits
- 18 Aug
Project Halcyon: Disclosure Letter
Document · indexed
- 16 Aug
Project Halcyon: Share Purchase Agreement
Document · indexed
- 4 Aug
Matter opened
Opened
Step 02 of 05
Build the tracker columns
Columns cover purpose, whether the tracker is strictly necessary, when it fires relative to consent, whether the policy names it and how long it persists.
Document Parties and effective dateTEXT Term and renewalTEXT Limitation of liabilityTEXT Governing lawTEXT nda-hartwell-meridian.txt saas-agreement-northgate.txt board-minutes-hartwell.txt Step 03 of 05
Run the inventory
Every tracker is answered against every column, and the thirty that appear in no policy entry are marked as undisclosed rather than assumed to be covered by a general description.
Document Parties and effective dateTEXT Term and renewalTEXT Limitation of liabilityTEXT Governing lawTEXT nda-hartwell-meridian.txt saas-agreement-northgate.txt board-minutes-hartwell.txt Step 04 of 05
Read the pre-consent firing
Nine non-essential trackers fire before any choice is made, which is the finding that has to be fixed before anything else is worth doing.
Document Parties and effective dateTEXT Term and renewalTEXT Limitation of liabilityTEXT Governing lawTEXT nda-hartwell-meridian.txt saas-agreement-northgate.txt board-minutes-hartwell.txt Step 05 of 05
Give the web team the fix list
The Audit & Risk Agent produces a ranked remediation list with the banner change, the tag manager change and the policy rewrite separated by owner.
Agent
Jurisdiction
Prepare for
Deliver as
Instruction
What should the agent look for?Documents
Drop a contract, or pick one from the matter
Also on the matter
- Offer_letter_v3.pdf2 pages
- Staff_handbook_2025.docx61 pages
- Board_minute_14_Aug.pdf3 pages
Platform model · zero data retention · audit register on
What comes back
A document, not a transcript.
- A tracker inventory with purpose, timing and disclosure status for each of the forty-one.
- The nine trackers firing before consent, listed first as the finding that blocks everything else.
- The mismatch between the inventory and the published policy, quantified rather than described.
- A remediation list split between the web team, the marketing team and the legal team.
Authorities it checks
- Privacy and Electronic Communications (EC Directive) Regulations 2003, reg 6
- UK GDPR, Art 6
What it does not do
- It does not scan the live site. It works from the inventory export supplied and states what that export covers.
- It does not change the banner, the tag manager or the policy.
- It does not decide whether a tracker is strictly necessary where that depends on how the site actually uses it; it asks.