What does GDPR mean for your photography website?

small business website design - laptopsLet me start this off with the necessary I am not a lawyer, and therefore can’t tell you if your site is GDPR (General Data Protection Regulation) compliant. Now that I have statement out of the way, this is what I understand. I am hoping a plain words explanation might be helpful to my clients, other photographers and small business owners.

If you have a WordPress website you fall under GDPR.

So here is the thing, you are collecting data on your website whether you think you are or not. Sites by default have cookies. Most of us run Google Analytics to understand our web traffic. Many of us have blog posts with comments, and almost all of us have contact forms. Some of us also have opt in forms for a newsletter.  All of these items collect data.

What do you need to do to secure these items?

  1. Get an SSL certificate for your site, install and implement it properly. I can not find a definite out there of any well known authority saying this is a must. However, here is my logic. GDPR includes collecting names and email, and says this needs to be done securely. Forms and comments do this so having an SSL gives your site security for this. Plus Google wants SSL for rankings so it’s a good idea anyway.
  2. Triple check your opt in forms for newsletters, downloads, anything like that. Clients must by default opt in, not have to uncheck to opt out. If you want to dive deeper into this, check out WP Beginner’s article.
  3. Be sure your newsletter audience knows they can opt out. You’ve probably received lots of emails from newsletters you subscribe to telling you how to opt out and sharing their privacy policy. I can’t find anything that says an email needs to go out but it seems like a good idea.
  4. Create a privacy policy and link to it on your home page.
  5. Make sure any plugins you are running are GDPR compliant. This one gets a little tricky but most plugins on your site can be googled to find out. For example, search “gravity forms gdpr compliant” and you should get your answer. Gravity Forms is by the way. I love Gravity Forms anyway, so one more reason to use it.
Related Post:   A fun quirky new website

This is a very brief overview of action steps you can take without spending too much time. Read the article I linked above if you really want to understand this thoroughly. I’m not an expert by any means on this, but I do understand WordPress so I am sharing the steps I took for my own site.

Questions about SSL? Send me a note or stay tuned for a blog post on the topic.

Have a project in mind? My next opening is July 16th! Setup a consult now.


Disclaimer: We are not lawyers. Nothing on this website should be considered legal advice.








Add a comment...

Your email is never published or shared. Required fields are marked *



I’m Jessica... a coffee addicted web geek and designer, mom and wife, who loves to practice yoga, get lost in a book, and explore new places with my family. I believe in laughing and living life to the fullest, appreciating the little moments.


I'm passionate about helping other women succeed with their small businesses. Beyond featuring recent projects, my mission for this blog is to share tips, struggles, and the journey I've taken. I especially understand the challenge of being a mom while running a creative business!


Send me a note to talk about working together.

client hours

t. 10am - 2pm

w. 12pm - 4pm

th. 10am -2pm

f. 12pm - 4pm


All hours are Eastern time.

Evenings and Saturday morning appointments are available by request.



get in touch

Based in Northern Virginia

(Washington DC area)

Serving clients throughout the United States, Canada and beyond.

c: 503.914.7093