(If not, you definitely need to put that on your 'to do' list with some urgency!)
Cardiff based estate agents James Douglas did - and they came to us to help with putting a watertight, legal policy in place.
When GDPR became a legal requirement earlier this year we saw a flurry of companies hurrying to get updated privacy policies in place on their websites before the deadline. And a lot of people went down the route of using a free template - or purchasing one, often with a hefty price tag.
But using a template (free or otherwise) simply doesn't work when it comes to GDPR.
"Jodie came to our office for a full day of data-mapping exercises and she made the entire process fun. We were able to explore how GDPR fitted into our company and what areas we needed to address to remain compliant," Celyn explains.
"It was a great opportunity to look at the business from a different perspective, whilst combating the more serious changes in legislation of GDPR."
If you'd like to find out more about how Penarth Management Limited can help your organisation to become GDPR compliant, please contact us at firstname.lastname@example.org or on 029 2070 3328.