GDPR basics for solo service businesses

What you will find in this guide

GDPR is about respecting people’s data and being transparent. You don’t need 100-page documents, but you do need a few things in place.

Key steps

• Know what personal data you collect and why (bookings, invoices, notes).
• Use tools that store data inside the EU or with proper safeguards.
• Have a clear Privacy Policy and Cookie Policy on your website.
• Give clients a simple way to request access or deletion of their data.
• Keep access to data limited to you and strictly necessary partners.

Useful tips

• Avoid storing sensitive data in plain spreadsheets or chat apps.
• Use strong passwords and enable two-factor authentication where possible.
• Regularly review your tools and subprocessors (hosting, email, storage).
• Document your decisions so you can show your efforts if ever needed.