The scanner reads the public pages of your website in the same way any visitor's browser would. It records what it can see, then interprets those findings for your sector.
Cookies and trackers
Which cookies are set on a first visit, and whether analytics or advertising tools load before anyone has agreed to them.
Forms
What your enquiry, booking and sign-up forms ask for, where they send it, and whether people are told how their details will be used.
Privacy information
Whether a privacy or cookie policy can be found, and which topics it appears to cover.
Third-party services
Booking systems, payment providers, chat widgets, maps, video and marketing platforms that receive data from your site.
Consistency
Whether what your website actually does matches what your privacy information says it does.
Sector context
Extra checks for the information your type of business is most likely to collect.
What it cannot tell you
A website scan cannot see how your organisation handles personal data internally: your retention practices, staff training, supplier contracts, breach procedures or paper records. Your report will say so plainly, and list what could not be determined.
