From a free audit to a published resultFrom your request to a published result
Three steps, then one of two endings. Every storefront goes through the same process.The business always hears from us first. You hear when the result is public.
- You
Claim your free audit
Enter your web address and an email at your site’s domain, then click the link we send you. That click starts the audit.
- Us
We audit your storefront
We visit as a shopper would, on the same criteria we use for every storefront in your sector.
- You
You get your report
Everything we checked and everything we found, ranked, with the evidence. What happens next depends on the result.
Then, depending on what we found:
Nothing found
A clean result is something to be proud of, so we publish it.
Your clean report goes public
A dated record on our site that customers and partners can check.
The audit badge
Something found
Nothing is published yet. Your report stays private for 28 days while you put it right.
Time to fix
On your own, or with our help.
We re-audit
The same checks, on your live site, free.
The re-audit result
What we observe that day, fixed or not.
Paying for help never changes your report, your re-audit date or what we publish. Only a change to the site itself does. Our independence commitments
- You
Tell us the site
Enter its web address and your email, then click the link we send you. That click starts the audit.
- Us
We audit it
The same checks we run on every storefront. When it’s done, we email you to say the report is with the owner.
- You
We share it with you
Once the site owner has had the chance to review it. They see it first: that’s fair to them, and it’s what gets things fixed.
Then, depending on what we found:
Nothing found
The site passed every check in scope.
The owner reviews it
The business sees the result before anything is public.
The clean result goes public
A dated record on our site.
We share it with you
By email, so you can see the result for yourself.
Something found
Nothing is published yet. The owner gets time to put it right.
The owner’s time to fix
Only the business sees the report.
We re-audit
The same checks, on the live site.
The re-audit result
What we observe that day, fixed or not. We share it with you by email when it’s published.
Why you don’t get the report straight away. Anyone can ask us to check any site. Only an email address at the site’s own domain gets the report before it is published, so a report can’t be used against a business before it has had the chance to fix things.
We follow a shopper’s visit, moment by moment
The problems behind recent settlements happen at specific moments in a visit. We check each one, the same way for every storefront.
Privacy choices & tracking
How your storefront treats the choices shoppers make about their data.
- Each moment observed in a real browser
- Every exception ranked, with evidence
- A note on where each fix sits
ScopeConduct observed as a US shopper would see it, in a standard browser. Each report states exactly where and when we looked. Not a legal assessment.
- Moment 1
The page loads
What starts running before the shopper has made any choice.
- Moment 2
The choice appears
Whether the options on offer work the way they read.
- Moment 3
The shopper says no
What keeps running, and who keeps receiving data, after a reject or opt-out.
- Moment 4
The browser sends an opt-out signal
How the storefront responds when a shopper’s browser asks, on its own, not to share their data.
- Throughout the visit
Who is watching
Which outside services receive shopper data, and which tools record what the shopper does.
From a free audit to fixes done for you
Every engagement starts with the free audit. Knowing exactly where each problem sits is most of the work; if you want help with the rest before your re-audit, this is how we work with you.
- Start here
Free audit
We audit your site as a shopper would and send you the report: what we found, where it sits and how serious it is.
Claim a free audit Free audit Full audit fix guide
Step-by-step instructions for every item in your report, written for whoever runs your site.
Details Full audit fix guideWeekly monitoring
We re-audit as your site changes, so a new app, tag or banner update does not quietly undo the work.
Details Weekly monitoringDone for you
We work with your team or your developer to make the changes, then confirm them on a re-audit.
Details Done for you
Paying for help never changes your report, your re-audit date or what we publish. Only a change to the site itself does.
Digital compliance in the news
The latest regulator actions and rule changes we follow, each summarised on our news page and linked to its source.
- California widens the right to delete to data a business got from third partiesCalifornia Privacy Protection Agency (CalPrivacy)
- TikTok settles US claims over how it collected children’s dataU.S. Department of Justice
- TaxAct settles over tracking code that sent tax details to ad platformsConnecticut Attorney General
- CalPrivacy opens its first sector audit, starting with gig economy platformsCalifornia Privacy Protection Agency (CalPrivacy)
Recent sector reports
We audit whole sectors on the same criteria and publish what we observe. A sector report names no business.
Who we audit for
- Direct-to-consumer brands that already pay for a consent tool.
- Operating partners and multi-brand groups: one engagement, every storefront.
- Privacy counsel and consent-tool agencies who want an independent opinion for their clients.
Independence statement
Tolbrook is independent of the businesses it audits. Every storefront in scope is audited the same way, on the same criteria and in the same period, whether or not it is a client. No business pays to be included, left out or described differently, and paying for any Tolbrook service never changes a sector report, an audit opinion or a public page. Only conduct we observe on a recheck does, and rechecks are free to every business in scope. Every business hears from us privately before we publish.
Tolbrook is a private company. It is not a regulator, a government agency, a standards body or a law firm. Nothing we publish is legal advice or a statement about any business's legal position.
Claim a free audit
See what your storefront shows a shopper. It starts with your web address.
Enter your web address