Website Compliance
If your site has a contact form, online ordering, or a booking page, California expects more from it than most owners realize. We bring small-business websites up to standard (privacy policy, terms, accessibility) and give you a documented record of the work.
The problem
California's Online Privacy Protection Act requires any website that collects personal information from California residents to conspicuously post a privacy policy. There is no small-business exemption. A contact form, reservation widget, or online ordering page counts as collecting personal information.
In California, a business with a physical location can face an accessibility claim tied to its website under the ADA and the state's Unruh Civil Rights Act, which sets statutory damages starting at $4,000 per violation. Demand letters built on website accessibility reach small businesses regularly, and resolving one typically runs into five figures before the site is ever fixed.
Most small-business web presences are assembled from parts: a designer builds the marketing site, a platform handles the ordering or booking. Each assumes someone else handled the legal pages. Usually nobody did, and the gap sits on your domain, under your business name.
Deliverables
Based on what your site actually collects and which platforms it actually uses: your forms, your ordering provider, your analytics. It is written to the privacy laws that actually apply to you, starting with California and reaching wherever your customers are. Not pasted boilerplate that describes a site you don't have.
We inventory the outside services your site relies on: your ordering or booking platform, analytics, live chat, and anything that records visitor sessions. Each gets reflected in your privacy policy and consent posture, because how California treats these tools is shifting. We add a cookie or consent notice only where your site actually warrants one, never a reflexive banner, and we flag any service that should have a data processing agreement in place for your legal team to handle.
Covering your site, your content, and your online ordering or sales where applicable.
A public commitment with a working feedback channel, so visitors who hit a barrier have a way to reach you instead of a reason to call a lawyer.
We test every page against the WCAG 2.2 AA success criteria using both automated testing and manual review, fix what is fixable within your platform, and tell you plainly what remains. Larger remediation is quoted separately, only if testing warrants it.
Policies that exist but aren't linked don't count. We wire the legal pages into your site footer across every page, including ordering and booking surfaces where the platform allows it.
What was checked, what was fixed, what remains. You keep it as your record of good-faith effort.
One thing we don't do: overlay widgets. Products that promise one-line accessibility fixes have not stopped businesses from receiving demand letters, and they often make sites harder to use with assistive technology. We fix the site itself.
What we don't touch: third-party tools embedded on your site, a booking widget, an ordering platform, a CRM, are audited and flagged, not rewritten. We don't alter code we don't control. If one falls short, you get it in writing with the vendor named, so you can take it up with them. Anything past the foundational fixes, deep or custom remediation, is scoped and quoted before we begin, never added to the invoice after the fact.
Eight IT implements and documents your privacy, terms, and accessibility work. We are not a law firm and do not provide legal advice. Where legal judgment is needed, that is your legal team's role, and we conform our work to their requirements.
Process
A full accessibility remediation runs four to eight weeks for a small site, longer for a larger one. The compliance package itself (your privacy policy, terms, accessibility statement, and the foundational accessibility fixes) moves faster: with full access and your details in hand, most small sites are done in about a week. Deeper remediation, if a site needs it, is scoped separately and takes longer. Timing also depends on our availability and how quickly you can hand over logins and details.
You send your website address, plus your ordering or booking platform if it lives on a separate domain. We take a look at every page.
We identify exactly what's missing and what's fixable, then send you a flat fee up front. No hourly meter, no surprises.
You give us access and a few business details, and we do the work. When it's done, we walk you through what changed and give you a written record of what was checked, what was fixed, and what remains. You end up understanding your own compliance position, not just holding a document.
FAQ
The compliance package (your policies, accessibility statement, integration, and foundational fixes) is usually done in about a week once we have full access and your business details. A full accessibility remediation of a small site typically runs four to eight weeks across the industry; if your site needs that depth, we scope it separately and tell you up front. The main variables are our availability and how quickly you can hand over logins and details.
Access to your site and any separate ordering or booking platform, by login or invite, and the business details for your legal pages: legal name, address, contact email and phone, and your returns policy if you sell online. The sooner we have these, the sooner we finish.
Yes. We bring your site up to standard and give you documentation of the work, which establishes a record of good-faith remediation going forward. We do not provide legal advice or defend the claim itself; that is your attorney's role. If your legal team has specific requirements, we implement to their direction.
No, and anyone who promises that is selling something. What we provide is real fixes to the site plus a documented record of good-faith effort, which is the strongest practical position a small business can be in.
No. Overlay widgets have not stopped businesses from receiving demand letters, and they often make sites harder to use with assistive technology. We fix the site itself.
They're part of the review. How websites use live chat, analytics, and session-recording tools has become an active area of California privacy litigation, so we check what your site runs, make sure your privacy policy and consent posture reflect it, and flag anything that needs your attorney's attention. We implement and document; the legal calls stay with your legal team.
Yes. Your privacy policy is written to wherever your customers actually are. If you take online orders, ship, or sell gift cards to people in other states or overseas, that can bring other privacy laws into play, including the EU's GDPR for customers in Europe. We reflect what applies to your business and flag anything that needs your attorney's attention.
A flat fee, quoted up front after we look at your site. No hourly meter and no subscription. If we find larger structural problems, we tell you and quote that work separately before doing anything.
Contact
Send us your website address. We'll tell you what's missing and what it costs to fix: a flat fee, quoted up front.