Data protection and accessibility for an insurance brokerage website in London: what to require (2026)

The verdict in three sentences

For a London insurance broker, the website is a collection point for sensitive data: a motor quote form may capture driving convictions, a health or protection quote may capture medical details. So you should require in writing from your provider data minimisation, a processor agreement, a cookie banner where rejecting is as easy as accepting, and a WCAG 2.2 AA target checked before launch. These requirements fit within £2,300 to £6,900 on the Kolonell international grid, against a 2026 ballpark of £12,000 to £40,000 with London agencies.

What framework applies in London?

Insurance brokers are authorised by the FCA. Website content falls under the financial promotion rules and the Consumer Duty: information must be clear, fair, not misleading and understandable by the target customers. On data, UK GDPR and the Data Protection Act 2018 apply, overseen by the ICO. Non-essential cookies and marketing email fall under PECR. On accessibility, the Equality Act 2010 requires you not to disadvantage disabled people; targeting WCAG 2.2 AA is the most practical way to show you have done so.

Driving convictions count as criminal offence data, and health information is special category data: collecting either needs a lawful basis plus an additional condition, to be confirmed with your compliance lead or DPO. This is not legal advice.

Profiles vary widely: commercial risk brokers around the City and Canary Wharf, private client brokers in Hampstead or Chelsea, SME brokers in Croydon or Ealing. The site should reflect the real client base and never suggest a status or market access the firm does not hold.

What should you require from your provider, item by item?

For complaints, claims guidance, regulatory information and team pages, ask for a correct heading structure, sufficient contrast, full keyboard navigation and accessible PDFs, or HTML instead. Older and visually impaired customers are well represented among personal lines clients.

What does a compliant site cost in London?

Typical London agency quotes for a 15 to 30 page brokerage site with quote forms give these 2026 ballparks.

Every tier includes a project manager reachable in your time zone, native English copywriting, delivery in 3 to 4 weeks and 3 months of support. An independent accessibility audit by a third-party auditor, often £1,500 to £4,000 as a ballpark, is a third-party cost. A client portal, integration with your broking platform and maintenance after 3 months are on quote. Kolonell built, for example, the site of TR Signing Group, a signing services company in New Jersey: a professional services site whose forms follow the same minimisation logic.

Mini case study

Illustrative example: Priya Shah runs an SME brokerage in Ealing focused on shops and trades. Her current form has 22 fields, including date of birth and claims history on the first screen. She chooses Kolonell Growth at £3,900, plus a third-party accessibility audit at £2,000: £5,900 in total, against a local quote of £16,000, a £10,100 gap. The first-contact form drops to 7 fields. If her completion rate hypothetically rises from 30% to 45% on 80 monthly form visitors, she receives 36 enquiries instead of 24.

FAQ

Does the cookie banner need a Reject button?

Under PECR and ICO guidance, rejecting must be as easy as accepting, and no non-essential cookie should be set before the choice. Allow 1 to 2 days of setup and testing within a 3 to 4 week project.

Can I ask for medical information in the quote form?

It is special category data, which needs a lawful basis plus an additional condition. The safest approach is to limit the first form to 6 to 8 fields and collect the rest later through a secure channel.

WCAG 2.1 or WCAG 2.2?

WCAG 2.2 AA adds criteria on target size and authentication, among others. Targeting 2.2 AA in 2026 costs little more than 2.1 AA if it is planned from the mockups.

Do marketing pages need compliance sign-off?

Yes, FCA financial promotion rules apply to website content. Build 2 to 3 days of compliance review into the schedule, before launch.

Who should hold the domain and hosting?

The firm, in its own name, with admin access. Put it in the contract whatever the tier, from £2,300 to £6,900.

Let's scope your project. Send us your lines of business, current forms and compliance sign-off calendar, and we will price the right tier between £2,300 and £6,900, delivered in 3 to 4 weeks. See the international offer or request a free quote: detailed reply within 48 hours.