GDPR & Privacy

Data protection and privacy compliance

Competitor Price Monitoring in the EU: What Is Actually Legal

October 30, 2026

Every ecommerce owner wants to know what the competition charges, and every one of them asks the same question first: are we allowed to? A plain language map of the rules that actually apply in the EU, Germany and Austria: why prices are facts and facts belong to nobody, where the database right does and does not reach, what the Ryanair cases really decided, when scraping becomes unfair competition, where GDPR starts, the competition law trap nobody warns you about, and what a crawler has to look like so that I am willing to run it.

Data Science eCommerce GDPR

October 30, 2026

PHP broke the internet again. Why WordPress should have retired in 2015, and what to build instead

October 21, 2026

On 21 October 2026 the NCSC warned that any version of PHP can be hijacked remotely (CVE-2026-109618 and CVE-2026-109619), giving attackers a direct path to your files and database. WordPress, Joomla, TYPO3 and every PHP site are affected, with official advice to take sites offline. A plain English guide to the real risk and the modern, secure, owned alternative on Ruby on Rails.

eCommerce GDPR SaaS

October 21, 2026

AI writes the code. Who is responsible for it? Why an experienced developer is worth more in 2026, not less

October 17, 2026

What companies really risk with AI-built software: security, agents with production keys, silent regressions on the critical path, architecture debt, compliance, insurance exclusions, lock-in. And how an experienced developer uses AI to deliver faster and for less.

AI eCommerce GDPR SaaS

October 17, 2026

Cookieless marketing in 2026: the first party data strategy that works whatever Chrome does

August 1, 2026

Chrome kept its third party cookies, and it barely matters. What Safari, Firefox and the consent banner really remove, what first party data is and is not, and how to measure without following people.

Data Science eCommerce GDPR Growth Hacking Marketing Automation SaaS

August 1, 2026

Privacy first growth: how to personalise with permission

March 20, 2026

Browsers have closed most of the gaps and UK law asks for a yes before you personalise. How to build personalisation on consent, your own server and data people give you on purpose, with the Rails code.

eCommerce GDPR Growth Hacking Machine Learning Marketing Automation

March 20, 2026

AI compliance for the DACH market, for UK businesses selling into Germany, Austria and Switzerland

March 18, 2026

Germany and Austria share the EU AI Act and the GDPR but not the enforcers. Switzerland has neither, and a data protection act that already covers AI. What a British business needs to know, and how to build one Rails codebase for all three.

AI DACH GDPR Machine Learning SaaS

March 18, 2026

Building GDPR compliant AI features in your SaaS

March 15, 2026

A developer's walkthrough of the processing contract, data protection by design and the impact assessment for AI features, under the UK GDPR and, for EU customers, the EU GDPR. The law first, then the Rails code.

AI GDPR Machine Learning Marketing Automation SaaS

March 15, 2026

GDPR and AI: when the right to be forgotten reaches the model

March 12, 2026

Deleting a customer's rows is easy. Their influence on a trained model is not. What Article 17 says in the UK and the EU, what regulators have actually said about models, what machine unlearning research can do, and the Rails architecture that keeps you out of the problem.

AI Data Science GDPR Machine Learning SaaS

March 12, 2026

The EU AI Act for SaaS builders: what applies now, and what moved to 2027 and 2028

March 10, 2026

The Digital Omnibus moved the high risk rules to December 2027 and August 2028, but the transparency duties already apply. Here is where a SaaS product sits, what it owes and how to build for it on Rails.

AI DACH eCommerce GDPR SaaS

March 10, 2026

Europe's digital dependence on US tech, and why I am switching to European alternatives

February 21, 2026

Three American companies hold 70% of Europe's cloud market, and US law follows the data wherever it sits. What the CLOUD Act says, what governments are already doing, what I use instead and how to cost a move.

DACH eCommerce GDPR SaaS

February 21, 2026

The NIS2 Directive explained: what SaaS and eCommerce businesses actually need to do

February 18, 2026

NIS2 covers cloud services, managed service providers and online marketplaces that serve the EU, with a 24 hour reporting clock and fines from €7 million. Who is in scope, what it asks, and where a UK business stands.

eCommerce GDPR Marketing Automation SaaS

February 18, 2026

The EU Cyber Resilience Act: what it means and who needs to prepare

February 15, 2026

The Cyber Resilience Act sets security rules for almost every product with software in it that is sold in the EU. Reporting has been live since 11 September 2026, and the rest applies from 11 December 2027.

eCommerce GDPR Marketing Automation SaaS

February 15, 2026

AI in business: the options, the dangers and how to get it right

January 3, 2026

Cloud AI, self hosted models or a hybrid of both: what each can do, what goes wrong when staff paste the wrong thing, what the GDPR and the EU AI Act actually require, and how to route sensitive work so it never leaves the building.

AI Data Science GDPR

January 3, 2026

Privacy driven search: what it really means for a British business

March 18, 2025

DuckDuckGo, Ecosia and Brave Search carry about 1% of UK search referrals, and most borrow Bing's or Google's index. The bigger privacy shift is in the browser and the law, and that touches every visitor you have.

eCommerce GDPR Growth Hacking SaaS SEO

March 18, 2025

GDPR as a strategic advantage: trust, churn and loyalty, with the evidence checked

September 14, 2024

Does data protection really build trust and cut churn? I separate what UK adults say, what experiments show and what real companies saw, and show how to measure it yourself.

eCommerce GDPR Growth Hacking SaaS

September 14, 2024

Consent by design: email capture, lead forms and onboarding under UK GDPR and PECR

September 4, 2024

Two UK laws decide whether you may email someone you collected. How I build sign up forms, checkouts, gated guides and onboarding so every address on the list is one you can actually use.

eCommerce GDPR Growth Hacking SaaS

September 4, 2024

Dark patterns and UK law: how UX becomes a legal liability

August 26, 2024

Pre ticked boxes, banners without a reject button, shaming pop ups and countdown clocks that reset. Which UK law each one breaks, what the ICO and CMA expect, and what I build instead, worked through on an invented Leeds tea shop.

eCommerce GDPR Growth Hacking SaaS

August 26, 2024

Event tracking and consent mode: measuring what you are allowed to see, and estimating the rest

July 29, 2024

What a British shop's tracking code may do before and after a visitor presses accept, what Google's consent mode really sends on a no, and how to estimate the sales your ad platform cannot see.

DACH Data Science GDPR Marketing Automation PPC

July 29, 2024

Cookies, consent and the ePrivacy mess: why selling into Germany and Austria needs a different tracking setup

May 16, 2024

The UK cookie rule changed in February 2026. Germany and Austria did not follow. What a British shop must do in each market, what fires when a visitor says no, and what that does to the numbers in your ad account.

eCommerce GDPR Growth Hacking SaaS

May 16, 2024