Data protection and accessibility for a notary and legal document services firm website in London: what to require (2026)

The verdict in three sentences

A London notary public practice or legal document services firm handles passports, company documents and powers of attorney, so its website must be built to UK GDPR, the Data Protection Act 2018 and PECR from day one, and it should target WCAG 2.2 AA with a published accessibility statement. Ask your provider for these items in writing before you sign, because retrofitting them later usually costs more than building them in. Kolonell builds them into a fixed grid of £2,300, £3,900 or £6,900, with secure document upload kept on quote.

What should a London notary website collect, and what should it not?

Notarial practices around the City, Holborn, Canary Wharf and Mayfair mostly serve two groups: corporate clients who need board resolutions, certificates of incorporation or powers of attorney notarised and legalised for use abroad, and private clients with property sales overseas, adoption files, degree certificates or statutory declarations. The website's job is to qualify the request (document type, destination country, deadline) and book an appointment.

Here the principle of data minimisation matters. A first enquiry form rarely needs a passport scan. Ask for name, email, phone, document type, destination country and preferred date. Identity documents should only be collected when the matter is confirmed, through a secure upload channel with encryption, access logging and a defined retention period, which Kolonell scopes on quote because it depends on your case management tools. Never let passport copies arrive as ordinary email attachments generated by a contact form.

The requirements checklist to give your web provider

Two practical notes. Most organisations that process personal data must pay the data protection fee to the ICO unless an exemption applies, so check your registration is current. And if you send newsletters to private clients, PECR rules on electronic marketing apply in addition to UK GDPR. This is not legal advice: notaries are regulated by the Faculty Office of the Archbishop of Canterbury, and you should check professional rules with them or with your own adviser.

How do you check accessibility before launch?

Accessibility is often treated as a design detail, yet many notarial clients are older private clients or people reading English as a second language. A WCAG 2.2 AA target covers concrete points: text contrast of at least 4.5:1, every function usable with a keyboard, visible focus, form errors explained in text, target sizes large enough to tap, and no content that only works with a mouse. Ask for three checks before go-live: an automated scan, a manual keyboard test of every form, and a screen reader pass on the booking path.

What does it cost in London in 2026?

London figures below are a 2026 ballpark from typical agency quotes and public rate pages in general terms. Third-party items are labelled as such.

Each Kolonell tier includes a project manager reachable in UK hours, native English copywriting, delivery in 3 to 4 weeks and 3 months of support. Maintenance after those 3 months is on quote, as is search work. See the international website offer for the tier contents.

On proof. Kolonell built the website of TR Signing Group, a signing services company in New Jersey, USA. The regulatory frame there is American, but the design questions are similar: clear service pages by document type, a booking path that collects only what is needed, and trust signals without overclaiming.

Mini case study

*Illustrative example.* Edward is a notary public with a two-person practice near Holborn. Around a third of his matters are powers of attorney and company documents for use in the Gulf, Spain and China. His current site has a contact form that invites clients to attach passports, a cookie banner with no reject button and no accessibility statement. He chooses Growth at £3,900, cuts the form to six fields, adds a cookie banner with equal accept and reject options, and publishes an accessibility statement. He commissions an independent audit (third-party cost) at about £1,800. Secure ID upload is scoped separately on quote for a second phase. Visible first-phase cost: £5,700, against a London agency quote of £18,000 for a similar scope.

FAQ

Does a notary website legally need a cookie banner?

If the site uses non-essential cookies such as analytics or advertising tags, PECR requires consent before they are set. A site using only strictly necessary cookies can avoid a consent banner, but must still explain them; the Kolonell Starter at £2,300 can be built either way.

Can clients upload their passports through the website?

Yes, but not through a standard contact form. A secure upload with encryption, access logs and a retention period of, for example, 6 to 12 months after the matter closes is a separate module on quote.

Is an accessibility statement mandatory for a private notary practice?

The formal statement requirement applies to public sector bodies, but the Equality Act 2010 duty to make reasonable adjustments applies to service providers. Publishing a statement against WCAG 2.2 AA is low cost and is included in Growth at £3,900.

Where will our data be hosted?

You should know the hosting region in writing before signing. Kolonell states the region and the processors in the project documents, so you can reference them in your privacy notice.

How long does a compliant rebuild take?

Delivery takes 3 to 4 weeks once content is ready. Allow 1 to 2 extra weeks if you commission an independent accessibility audit.

Let's scope your project. Tell us your services, languages and whether you need secure document upload, and we will send a fixed GBP scope with a privacy and accessibility checklist. See the international offer or request a free quote: detailed reply within 48 hours.