Certoa @cert_oa
UK GDPR document templates for small businesses. Written by a Data Protection Officer. certoa.co.uk United Kingdom Joined August 2026-
Tweets22
-
Followers5
-
Following112
-
Likes93
Most agencies only think about a DPIA once the campaign's live. It's meant to happen before higher-risk work starts: profiling at scale, tracking people across sites for ad targeting. After launch, it's evidence the risk came late. Before or after, for yours? #DataProtection
Most small recruitment agencies don't realise a subject access request doesn't need those exact words. If a candidate emails asking what you hold on them, that's a SAR. The clock starts when it lands, not when someone notices. Does your inbox catch it by day 20? #DataProtection
I've seen charity intake forms where a dietary requirement or health condition sits in the same column as name and address. Health data is special category under GDPR, needing its own lawful basis, not the one covering the rest. Does yours treat it differently? #UKCharity
A laptop goes missing. An email goes to the wrong person. The clock on telling the ICO starts immediately, not once it's fixed. 72 hours to decide and start containing, not to have it solved. 20 plain-English questions, no sign-up: certoa.co.uk/free-assessment
A funder or bigger client asks for "your GDPR policy." What exists is usually a vague sense one's needed, not a document. It's the one that ties the rest together: what you do with people's data, and who's responsible. 20 plain-English questions: certoa.co.uk/free-assessment
A funder or a bigger client asks for "your GDPR policy," and what exists is a vague sense one's probably needed, not a document you can send. It's meant to tie the rest of your GDPR paperwork together, not a box-ticking extra.
Most small agencies I talk to don't think about a data processing agreement until a client's due diligence form lands, deadline attached. It always wants the same things: what data you hold, who processes it, how long you keep it. Worth having those answers ready first. #GDPR
Ask most small businesses how long they keep customer records and the honest answer is nobody's ever decided, it's just never been deleted. Keeping everything forever isn't the safe option it feels like. Deleting the wrong thing too early is worse.
Most small agencies I talk to send marketing emails because they always have, not because anyone checked the legal basis. Consent and legitimate interest aren't interchangeable, and picking the wrong one is the gap a complaint finds first. Which one covers your list? #GDPR
Most small charities I talk to have a retention line that just says "as long as necessary". That's a placeholder, not a period. A funder or ICO check wants real timeframes for donor records, safeguarding notes, volunteer files. Does yours name one, or just the phrase? #UKCharity
Somebody fills in your contact form or joins your newsletter. UK GDPR expects you to have told them what happens to their data, not to explain it once they ask. A generic notice copied from a template site doesn't hold up, it has to describe what your business actually does.
Most small recruitment agencies I talk to have a privacy policy on the website. Almost none have one covering the CVs already sitting in their database. Does yours say what's held, why, and for how long, or does it stop at the contact form? #DataProtection
Most small charities I talk to don't have a RoPA. Not because they're careless. Nobody ever explained what it is or why a funder or an ICO check would ask for one. It's just a log: what data you hold, why, where it lives, who sees it. An afternoon's work, not a project.
Working with GDPR since 2018, the deadline that catches small businesses out most is the one-month subject access request window. A customer or ex-employee can ask what data you hold on them, and the clock starts the day the request lands, ready or not. certoa.co.uk
Launching a CRM, CCTV, or an app? You might need a DPIA first. It is required when a project is likely to cause high risk: sensitive data at scale, public monitoring, automated decisions, or location tracking. Catch the problem before you build, not after. certoa.co.uk
Had a data breach? You have 72 hours to notify the ICO, but only if it is likely to put people at risk. Not every incident needs reporting. Knowing which do, and having a short response process ready, is what actually saves you on day one. certoa.co.uk
A subject access request gives you one calendar month to respond, not once you get round to it. Most businesses get caught out on the clock, not the substance, often when it lands on a Friday with no owner. Sort a process before you need one. certoa.co.uk/downloads
A subject access request gives someone one calendar month to see their data. Most businesses that get caught out aren't wrong on the substance, they're wrong on the clock. Have a short process ready before a request lands. certoa.co.uk
boc virtual agency @AgencyBoc
2 Followers 5 Following Recruitment | Virtual Platform | GT Force App | E-Learning Compliance-led workforce screened UK talent, no fees, NMW only, full support & training.
Cleo Agents @CleoAgents
7 Followers 51 Following Cleo Agents are custom agents for running a home or a business. Built one at a time.
Jheck Plays @JheckPlays
93 Followers 742 Following
Emma ate that @lxuzh469211
6 Followers 503 Following glitter bomb with anxiety attacks ✨ follow back always
The Reginald Centre @ReginaldCentre
2K Followers 1K Following Reginald Centre Community Hub provides one stop centre services, job shop support and a library amongst other community activities.
BARCA-Leeds @BARCALeeds
6K Followers 2K Following Innovative multi-purpose charity delivering transformational services to adults, young people & families in Leeds.
Leeds Community Found... @LeedsCommFound
9K Followers 2K Following We distribute vital grants and give trusted advice to Community Organisations across Leeds and Bradford to influence positive change.
People Matter Trust @PeopleMatterTru
364 Followers 163 Following The People Matter Charitable Trust has helped approx 16,000 jobseekers in their search for work. Services are free to adults in Eastbourne/surrounding areas.
Medianature consultan... @medianatureUK
23 Followers 66 Following MediaNature is a full-scaled media company, based in London. We specialize in publishing, digital media, event management, photography, and web development
McNally Recruitment L... @McNallyRecruit
23 Followers 0 Following We provide a bespoke service in sourcing professionals and finding opportunities within the IT sector throughout Scotland and the reast of the UK.
VoluntaryActionLeeds @VolActionLeeds
8K Followers 1K Following Official Twitter account of Voluntary Action Leeds (VAL). We provide support services and specialist advice to organisations and community groups across Leeds.
Canine Concern CIO @Canine_Concern_
176 Followers 296 Following Canine Concern works across #England & #Wales to provide Therapy Dogs 🐶 We visit Care Homes, Hospitals, Schools, Uni's & more. Based in #Sussex
HALE 💙 @HALECharityBfd
2K Followers 1K Following HALE is a healthy-living charity based in Shipley. "To improve health where there is greatest need"
Bradford Central FB @foodbankBD
1K Followers 483 Following Bradford Central Foodbank, providing emergency food for local people in crisis. Hosted by @thelight_church
Digital Marketing Age... @capidhouser
3K Followers 4K Following Strategic #SocialMedia #DigitalMarketing #SearchEngineMarketing Agency : Delivering Marketing Campaigns, consulting & training for #BusinessDevelopment
Oxfordshire Homeless ... @oxhomelessmvt
1K Followers 856 Following OHM is a partnership aiming to bring together everyone addressing homelessness in our county. Account shared with our Lived Experience Advisory Forum (LEAF).
Sparkloop Creative Ag... @Sparkloop
132 Followers 93 Following Bright ideas. Over and over. We create Branding + Print + Digital + Video for business and brands the world over.
Studio Resolve | Bran... @studioresolveuk
22 Followers 156 Following Strategic, results-driven branding. Creative design work. Impactful campaign concepts. Scroll-stopping brand language and naming.
Small Charity Week @SmallCharity_Wk
15K Followers 2K Following From 24-26 June, we're celebrating the essential work of small charities across the UK. Share your small charity story and make your voice heard.
Lancashire Mind @LancsMind
5K Followers 1K Following We are Lancashire Mind. We're more than a mental health charity. We're leading the mental wellbeing revolution in Lancashire.
HR Heads Recruitment ... @HRHeads
656 Followers 409 Following Specialist HR recruitment agency based in Hampshire. #HR #Recruitment #Recruiting #Hiring For all our social links visit https://t.co/WAsNqgNAm1
Refined Global Recrui... @GlobalRefined
407 Followers 866 Following Refined Global Recruitment is a specialist no nonsense human resources consultancy with offices in Mayfair, London, UK & Dubai Marina, Dubai, UAE.
Trauma Care Charity U... @TraumaCareUK
17K Followers 7K Following Trauma Care was founded in 1996, with the aim to improve the outcome of the #Trauma victim by establishing #BestPractice throughout the whole Chain of Care.
PKD Charity UK @PKDCharity
3K Followers 1K Following Seeking a Cure for Polycystic Kidney Disease. UK charity. Supporting patients, generating awareness, fundraising for research #ADPKD #ARPKD #polycystickidneys
RLS-UK (Charity) @RestlessLegsUK
968 Followers 367 Following RLS-UK is a registered charity that supports people with Restless Legs Syndrome (RLS) & Periodic Limb Movement Disorder (PLMD) https://t.co/DnLwuPefNj
CharityComms @CharityComms
48K Followers 3K Following The professional body for charity sector communications.
BPRCVS @BPRCVS
2K Followers 504 Following BPRCVS Supporting Voluntary, Charity, Community & Faith Sectors. Helping you to help others. Contact us on 01282 433740.
boc virtual agency @AgencyBoc
2 Followers 5 Following Recruitment | Virtual Platform | GT Force App | E-Learning Compliance-led workforce screened UK talent, no fees, NMW only, full support & training.
Veterans Aid @VeteransAidUK
994 Followers 282 Following Caring for Veterans in Crisis...Now! Veterans Aid's official Twitter account. (NB @veteransaidnet is now closed). Registered Charity in England & Wales: 1095308
Haemochromatosis UK @IronOverloadUK
3K Followers 599 Following We're the UK's only charity supporting people affected by genetic #haemochromatosis (#IronOverload). For advice contact our helpline (Mon-Fri 12-3pm, UK only).
Inclusive North @Inclusive_North
897 Followers 501 Following Our mission is to ensure we are enabling communities in accessing opportunities.
Link UP London @LinkUpLondonUK
1K Followers 1K Following Connecting charities, community groups and social enterprises with skilled volunteers on short term projects that will help them grow and develop FOR FREE
Confident Conversatio... @ConfidentConvos
101 Followers 242 Following Confident Conversations: helping parents and carers in hospital become partners in their child's care. Reg. Charity No: 1195742
SmallCharity @SmallCharity1
679 Followers 1K Following Small charities help communities thrive. We provide support, skills & tools. Sign up to our free small charity newsletter https://t.co/1mOIoRzSQv
NRAS @NRAS_UK
9K Followers 1K Following Patient-led charity in the UK specialising in providing info & support to those living with rheumatoid arthritis #RA & juvenile idiopathic arthritis #JIA.
The Chester Bluecoat ... @BluecoatChester
1K Followers 1K Following Bringing hope & change to Chester communities by providing grants, offering almshouse accommodation & supporting charities from The Bluecoat.
WestCheshireFoodbank @WestCheshireFB
2K Followers 1K Following Emergency Food For Local People In Crisis | A Trussell affiliated Foodbank | 0151 355 7730 | [email protected]
Platform For Life @PfLChester
468 Followers 994 Following Local charity providing community based mental health & family support for children, young people & adults living in poverty with complex mental health needs.
PrettyCotswoldDesigns @PrettyCotswoldD
28 Followers 1 Following I make notebooks and other things with my own photos around the beautiful Cotswolds of England
Tanya Warren - Bitzas @Tanyawarren
58K Followers 12K Following Its mainly just me & the crochet hook! Handmade crochet toys & baby goods. DM for special requests. #MHHSBD member https://t.co/OELs1MUzDT
Grace @amazingraceart
25K Followers 10K Following Scottish Artist, Animal lover, Vegan ❤️View my #etsyshop for my eclectic mix of artwork #art #MHHSBD ➡️ https://t.co/JyYF7LbScN
Bizzy-Beadz @bizzy_beadz
145 Followers 155 Following Geeky designs, hand made from individual Hama beads, inspired by gaming, film & comic books: very popular with kids of all ages and geeks alike!
Diana D Designs @DDCrochetDesign
9K Followers 2K Following I'm Diana, a crochet designer and artist. My passions are foxes, crows and all wildlife #crochet #yarn #crafts #knitting #wildlife
Enterprise Nation @e_nation
49K Followers 6K Following Whether you’re launching a new business or developing an existing one, Enterprise Nation connects you to the resources and expertise to help you succeed.
Small Business @smallbusinessuk
41K Followers 3K Following Expert advice and tips for people looking to start a business and succeed in the early stages of business.
Philip Cox @Samphireglass
11K Followers 4K Following Learning Glass artist. Love to use glass to make home decor pieces and jewellery. check out my accounts on etsy, ig and Facebook.
Hannah Morris💙 @hanhanmozza
1K Followers 925 Following Textile Artist & Designer. Photographer. Writer.
TirGlas @TirGlasCymru
415 Followers 2K Following Welsh blankets. Cardiff workshops - natural dyes, candle and wreath making workshops. ReDesigned bags, hand dyed yarn, handmade botanical inks. Welsh gift shop
Emma Jones @emmaljones
36K Followers 5K Following Small Business Commissioner & Non Exec Director of Ramsgate Space
Daniel Latto @DanielLatto
11K Followers 11K Following 👉 Full Service Digital Marketing Agency | One Monthly Invoice 🔥 Facebook Ads, SEO, Website Updates, Content, Video Editing 🌐https://t.co/aG3TUc6vXS
Cheap Accountants @cheap_accounts
5K Followers 5K Following Helping #smallbusinesses by offering expert #accounting #advice and low cost accounting #guidance.
MailSPEC @mailspec
5K Followers 567 Following We provide AI data classification and governance in sovereign control for sensitive communications in the regulated industries.
Simply Business @simplybusiness
29K Followers 2K Following One of the UK’s biggest insurance providers, doing our best for over a million small businesses and landlords. DM us for insurance help Mon-Fri 9am-5pmYou might like
