Sample report (fictional example)

Report details

Report details
Prepared for	Quillmere Candle Co. Ltd (fictional)
Website	quillmere-candles.example (online shop)
Company number	EX000123 (fictional)
Checked on	2 October 2026, 10:14 to 10:31 BST
Pages checked	34 public pages: page code and visible text, with each flagged item checked by hand
Report reference	MD-EXAMPLE-001

Summary

This example shows the six core checks. Good-practice checks, covering accessibility basics and HTTPS and security headers, are reported separately as good practice or for review.

We checked seven items. Five need attention, one needs review and one showed no issues.

Summary of results
#	Check	Result
1	Company details	Needs attention
2	Advertising tags before consent	Needs attention
3	Analytics before consent	Needs review
4	Privacy notice	Needs attention
5	Data protection complaints route	Needs attention
6	Online shop cancellation information	Needs attention
7	Email sign-up consent	No issues found

What the results mean. "Needs attention" means we could not find something a named rule asks for. "Needs review" means the answer depends on details we can't see from outside, such as how a tool is configured. "No issues found" means we found what the rule asks for on the pages we checked.

Findings

1. Company details Needs attention

What we found

The registered name, Quillmere Candle Co. Ltd, appears in the footer of every page. We could not find the registered number, the part of the UK the company is registered in, or the registered office address on any of the 34 pages we checked. The footer shows a trading address (Unit 3, Lantern Yard, Fernby), which differs from the registered office on the Companies House record.

Evidence

Footer text on all pages, including / and /pages/contact, captured 2 October 2026, 10:16 BST:

Companies House record (fictional): company number EX000123, registered in England and Wales, registered office 1 Example Street, Exampleton.

Rule

Company, LLP and Business (Names and Trading Disclosures) Regulations 2015, reg 24 (registered name) and reg 25 (part of the UK registered, registered number and registered office address on websites). Electronic Commerce (EC Directive) Regulations 2002, reg 6 also asks online businesses for their name, geographic address, email and registration number.

Suggested fix

Add this line to the site footer and to the terms and privacy pages:

Quillmere Candle Co. Ltd is registered in England and Wales, company number EX000123. Registered office: 1 Example Street, Exampleton. Trading address: Unit 3, Lantern Yard, Fernby.

2. Advertising tags before consent Needs attention

What we found: On the home page and one product page (home page extract shown), the Meta Pixel code is set to load with the page. We found no consent-tool code that holds it back until a visitor makes a choice in the cookie banner.
Evidence: Page code, home page, 2 October 2026, 10:21 BST (extract):
<script>!function(f,b,e,v,n,t,s){…}(window,document,'script','https://connect.facebook.net/en_US/fbevents.js'); fbq('init', '…'); fbq('track', 'PageView');</script> (no consent-tool attribute or category on this tag)
Rule: PECR reg 6. The ICO's guidance says storage and access technologies used for online advertising purposes need consent (ICO: how do the rules apply to online advertising?).
Suggested fix: Set the Meta Pixel to load only after a visitor accepts advertising cookies. In most consent tools this means assigning the tag to the "marketing" category and enabling blocking until consent. The Fix Pack includes wording for this fix, and a re-check after you make the change.

3. Analytics before consent Needs review

What we found: The Google Analytics 4 tag is set to load with the page, before any banner choice. Since 5 February 2026, PECR has an exception for storage and access whose sole purpose is collecting statistics about how a website or service is used, to improve it. It applies only if the information isn't shared except with someone helping to make those improvements, visitors get clear and comprehensive information about the purpose, and they have a simple, free way to object and haven't objected. We could not find that information or a way to object.
Evidence: Page code, home page, 2 October 2026 (extract):
<script async src="https://www.googletagmanager.com/gtag/js?id=G-XXXX…"></script> gtag('config', 'G-XXXX…'); (no consent-tool attribute or category on this tag)
Rule: PECR reg 6 and Schedule A1, paragraph 5 (statistical purposes, in force from 5 February 2026); ICO: what are the exceptions?
Suggested fix: Choose one: either hold analytics until consent, or check whether your set-up meets the exception's conditions and add a short explanation and an "opt out of analytics" control to your cookie policy. We've marked this for review rather than as a finding because it depends on how the analytics is configured.

4. Privacy notice Needs attention

What we found

The privacy notice at /policies/privacy-policy names the company, lists purposes and lawful bases, sets out people's rights and names the ICO. We could not find how long personal data is kept, or the criteria used to decide.

Evidence

Headings found on /policies/privacy-policy, 2 October 2026: Who we are · What we collect · How we use it · Your rights · Contact the ICO. No section or sentence about retention was found.

Rule

UK GDPR Article 13(2)(a); ICO: the right to be informed

Suggested fix

Add a "How long we keep your data" section. For example:

We keep order records for six years from the end of the financial year they relate to, for tax purposes. We keep newsletter details until you unsubscribe.

Replace the periods with the ones you actually use.

5. Data protection complaints route Needs attention

What we found: We could not find a way for people to make a data protection complaint to the company itself. The privacy notice tells people they can complain to the ICO, but not how to complain to Quillmere first, or when they'll get an acknowledgement.
Evidence: Checked: privacy notice, contact page, footer links, terms of service, 2 October 2026.
Rule: Data Protection Act 2018, section 164A, inserted by Data (Use and Access) Act 2025, section 103, in force from 19 June 2026: controllers must make it easy to complain (for example with a complaint form that can be completed electronically), acknowledge a complaint within 30 days, take appropriate steps to respond and tell the complainant the outcome (ICO: how to deal with data protection complaints).
Suggested fix: Add a short section to the privacy notice and link it from the contact page:
If you're unhappy with how we've handled your personal data, email privacy@quillmere-candles.example with "Data protection complaint" in the subject. We'll acknowledge your complaint within 30 days, look into it and tell you the outcome. You can also complain to the Information Commissioner's Office.

6. Online shop cancellation information Needs attention

What we found: The refund policy states the 14-day right to cancel and says the customer pays return postage. We could not find instructions on how to cancel, or a model cancellation form.
Evidence: Extract from /policies/refund-policy, 2 October 2026:
"You have 14 days from receiving your order to change your mind. Return postage is paid by the customer."
Rule: Consumer Contracts Regulations 2013, Schedule 2, paragraph (l) (the conditions, time limit and procedures for cancelling) and reg 13(1)(b) with Schedule 3, Part B (the model cancellation form). Under reg 31, if the paragraph (l) information isn't given, the cancellation period can be extended by up to 12 months.
Suggested fix: Add a "How to cancel" paragraph with your email and returns address, and a link to a model cancellation form. We include both in the Fix Pack. Personalised or perishable items may be exempt, so tell us which of your products are made to order.

7. Email sign-up consent No issues found

What we found: The footer newsletter form and the checkout sign-up box are both unticked by default and say what people are signing up to. Each newsletter we could see in the public archive includes an unsubscribe link.
Evidence: Forms checked: footer sign-up form (all pages), checkout "Email me with news and offers" box, 2 October 2026.
Rule: PECR reg 22; ICO: electronic mail marketing
Suggested fix: No change needed.

Information note: ICO register

We matched Quillmere Candle Co. Ltd by name and postcode on the ICO's public register of fee payers. This is for information only. Whether a business needs to pay the data protection fee depends on its circumstances; the ICO has a self-assessment on its website.

Next steps

Fix items 1, 5 and 6 first: they are usually text changes.
Ask whoever manages your tags to make the change in item 2, and decide how to handle item 3.
When you’re ready, the Fix Pack includes the fixes and a re-check. If you buy it within 30 days of your full report, your £79 is credited towards its £295 price.

Scope and limits of this report

This report records what we found on the public pages listed, on the date shown. Websites change, and automated checks can miss content loaded by JavaScript, text in images or PDFs, or pages we didn't reach. The report is information, not legal advice, and it doesn't confirm that a website meets the law. Macuno Digital is not connected with any regulator.

Request a free check for your website

Website Compliance Report: example