top of page
ZZ.png

Packages & Subscriptions

The packages

First Steps

Start clean. Get compliant. Build on solid ground.

Starting from

€1,990

One-off. Fixed price confirmed in writing.

Does this sound familiar? "I know I should be doing something about GDPR, but I'm not sure where to start."

What's included

  • Website Compliance Audit: We check your site for unlawful cookies, broken banners, and missing legal documents.
  • GDPR Gap Assessment: A clear report on what your business does with personal data and what needs to change.
  • Essential Legal Documents: Privacy notice and cookie policy, drafted and ready to publish.
  • Written Action Plan: A plain-language list of what to fix and in what order.
  • 30-Day Follow-Up Call: We check in after a month to answer questions and confirm progress.

Save approx. €600+ vs. individual services

Timeline

Delivered in 2–3 weeks

Ideal for

New businesses & small teams

Free 30-minute call: dpo@zephyr-privacy.com | Fixed-price proposal within 48 hours

Growing Business

You're scaling. Make sure your compliance keeps up.

Starting from

€5,500

One-off. Includes 6 months of support.

Does this sound familiar? "We're hiring more people, signing bigger contracts, and collecting more customer data. I want to make sure we're protected."

What's included

  • Full GDPR Compliance Audit: Everything your business does with personal data, mapped and rated for risk.
  • Complete Implementation: We build the policies, contracts, and procedures your business actually needs. No generic templates.
  • Supplier Contract Review: We check that everyone you share data with has signed the right agreements.
  • Staff Awareness Training: A practical session for your team. What they need to know, nothing they don't.
  • 6 Months of Expert Support: A senior data protection expert on hand to answer questions and review anything new.

Save approx. €2,000+ vs. individual services

Timeline

Implemented in 4–6 weeks

Ideal for

Businesses with 10–100 employees

Free 30-minute call: dpo@zephyr-privacy.com | Fixed-price proposal within 48 hours

Audit-Ready

When a client, investor, or regulator asks, you have the answers.

Starting from

€3,800

One-off. Fixed price confirmed in writing.

Does this sound familiar? "A big client wants to see proof of GDPR compliance before signing. An investor is asking about our data practices. I need this to look right."

What's included

  • Full GDPR Compliance Audit: A detailed review of how you use personal data, with clear risk ratings.
  • Gap Closure Sprint: We fix the most urgent gaps first. Documents, contracts, and procedures updated.
  • Compliance Summary Letter: A dated overview of what we reviewed and what is in place, ready to share with clients, investors, or auditors.
  • Record of Data Use: Your official record of how your business uses personal data. One of the first documents a regulator asks to see.
  • Q&A Preparation: We prepare you and your team to answer due-diligence questions with confidence.

Save approx. €1,400+ vs. individual services

Timeline

Completed in 3 weeks

Ideal for

B2B companies under due diligence

Free 30-minute call: dpo@zephyr-privacy.com | Fixed-price proposal within 48 hours

AI-Ready

Using AI in your business? Know what you're responsible for.

Starting from

€3,200

One-off. Fixed price confirmed in writing.

Does this sound familiar? "We use ChatGPT, Copilot, or other AI tools at work. I keep hearing about the new EU AI rules and I have no idea what they mean for us."

What's included

  • AI Tool Inventory: Every AI tool your business uses, identified, documented, and sorted by legal risk level.
  • EU AI Act Report: A plain-English explanation of which rules apply to you and by when.
  • AI Risk Assessment: A risk review of the AI tools that use personal data, including a formal impact assessment where the law requires one.
  • Where GDPR and AI Rules Overlap: Automated decisions, profiling, and employee monitoring, reviewed together.
  • Action Roadmap: Prioritised steps to be compliant before each deadline applies to you.

Save approx. €1,000+ vs. individual services

Timeline

Delivered in 2–3 weeks

Ideal for

Any business using AI tools

Free 30-minute call: dpo@zephyr-privacy.com | Fixed-price proposal within 48 hours

Fully Protected

Total compliance coverage, every month, handled for you.

Starting from

€1,650/mo

12-month minimum term

Does this sound familiar? "I want compliance taken off my plate completely. I don't want to think about it. I want someone I trust to handle it."

What's included

  • Your Own Data Protection Officer: A qualified expert acts as your official DPO, named in your documents and notified to the data protection authority.
  • Annual Compliance Audit: A full review every year, so your documents and processes stay current.
  • Breach Response: If something goes wrong, we respond within 2 business hours and prepare the notice to the authority with you, within the 72-hour legal deadline.
  • Unlimited Advice: Call or email whenever a new question comes up. New supplier, new product, new country.
  • Regulatory Monitoring: We track changes in the law and tell you what, if anything, you need to do.
  • Annual Staff Training: One training session per year for your team, kept up to date with the latest rules.

Save approx. €6,000+/yr vs. individual services

Commitment

12 months, then cancel with 60 days notice

Ideal for

Businesses that want zero worry

Free 30-minute call: dpo@zephyr-privacy.com | Fixed-price proposal within 48 hours

Common questions

Do I legally need to do this?

If your business collects names, emails, phone numbers, or any other personal data from customers, staff, or partners, yes. GDPR applies to businesses of every size. There is no general exemption for small businesses.

What happens if I do nothing?

Fines can reach €20 million or 4% of worldwide annual turnover, whichever is higher. Beyond fines, data protection failures cost businesses contracts, customers, and reputation. The real choice is whether to deal with it now, or after something goes wrong.

How long does this take?

Most packages take 2–6 weeks, depending on complexity. You get a fixed timeline in writing before work starts. Fully Protected starts within 5 business days of signing.

Can I mix and match services?

Yes. Every package can be tailored. If your situation doesn't fit one package, we scope a custom engagement at a fixed price. You always know exactly what you're getting before you pay anything.

We're a small business. Is this really for us?

Yes. Regulators fine small businesses too, and being small is not a defence. That is why our entry package starts at €1,990.

We already have a privacy policy. Are we fine?

Probably not. Having a privacy policy and being GDPR compliant are very different things. A privacy notice is only one of many requirements. Our Website Audit (included in First Steps) checks whether your policy actually matches what you do.

All prices in EUR, excluding VAT. Prices shown are starting prices. Your fixed price and scope are confirmed in a written proposal before work begins.

ZC.png
bottom of page