Data Privacy & Protection
Privacy controls live in tag managers, consent banners, CRM permissions and data exports. We configure them, document them and measure what they change in your figures.
Questions we help answer
- Does our consent banner work the way our advisers say it must in each market?
- Who can export customer data from our CRM, store or booking system?
- How much of our analytics do we lose to consent choices, and do we measure that correctly?
- Where is customer data copied, and how long do we keep it?
- How would we answer if a customer asked for all the data we hold on them?
What we do
Data inventory and flow mapping
Where personal data is collected, stored, copied and sent, including apps, tracking pixels and integrations.
Consent configuration
Consent banners, tag behaviour and consent signals set to the requirements your advisers specify for each market.
Access and permission review
Who can view or export personal data in each system, and removal of access that is no longer needed.
Retention and deletion routines
Scheduled deletion and archiving configured in the systems that hold personal data.
Data subject request workflow
A recorded process to find, export or delete one person's data across every system that holds it.
- How an engagement with THEFOCUS startsDiscuss this with us
How we approach it
- 01
Inventory from the systems
Tag managers, page source, app lists and integration settings show what is collected and where it goes.
- 02
Configure to the advisers' requirements
Your advisers set the rules. We configure consent, access and retention to match and record each setting.
- 03
Measure the effect
We measure how consent choices change reported figures and identify which metrics stay reliable.
- 04
Recheck after changes
New apps, tags and integrations are checked against the inventory before and after they go live.
Relevant industries
How an engagement with THEFOCUS starts
A first conversation is about your situation. If there is a fit, we propose a scoped diagnostic with a fixed deliverable before any larger commitment.
Discuss this with us01
A working conversation
Forty-five minutes with the person who would lead the work. We ask about the decision, the systems behind it and the deadline.
02
A scoped diagnostic
Read-only access, a fixed timeframe and a written finding: what the records show, what it costs and what to change first.
03
A plan you can act on
Changes, owners, measures and exclusions in writing. The same team then builds and measures, or hands over cleanly.
- One accountable team
- The people who diagnose also build the systems and measure the result.
- Partners chosen per problem
- Independent specialists join for the parts that need them, under one contract.
- Records before dashboards
- Orders, ledgers and logs are reconciled before any recommendation depends on them.
Questions executives ask
Can you act as our data protection officer or legal adviser?
No. We do not act as a data protection officer and we do not give legal advice. Your advisers decide what the law requires, and we configure the systems to match and document how they are set.
Will consent controls reduce our reported figures?
Often they do, because visitors who decline are no longer measured. We measure the size of that gap and show which figures stay reliable for decisions, such as order counts from your commerce platform.
Discuss this with us
A few details help us route your enquiry to the right partner. Fields marked optional can be left blank.