See where your cookie setup may be exposed

It is commonly useful for businesses that rely on website analytics, advertising tools, embedded content, CRM integrations or other tracking technologies that collect information about visitors. That includes online stores, SaaS platforms, healthcare providers, agencies and lead-generation businesses. If your site uses a cookie banner but you are not sure whether it matches what is actually happening behind the scenes, an audit can be a sensible next step. It is especially relevant where multiple plugins, pixels or third-party tools have been added over time without a full legal review.

Common issues include banners that do not match the site's actual tracking behaviour, notices that are too vague about what tools are running, consent flows that are hard to understand, and cookies being set before the user has made a meaningful choice. We also often see gaps between the public-facing wording and the way the For Cookie Compliance Audit, the wording should follow your real information flows. For Cookie Compliance Audit, collection points and disclosure practices shape the drafting. through analytics, advertising or embedded tools. The legal position depends heavily on what happens in practice, not just what the policy says on paper.

The service includes a legal review of your website's cookies and trackers, the consent interface shown to users, and the related wording used in notices or policies within the agreed scope. You receive a written report identifying the main legal concerns and practical recommendations for improvement. This is broader than a one-off question about a banner because it looks at the overall cookie and consent picture. It does not include coding changes, implementation by developers, security remediation, or ongoing monitoring after the audit is completed.

No. You receive practical guidance on the issues in scope, while any broader risk position depends on your documents, conduct and implementation. That is because the answer can change depending on how your site is configured, what third-party tools are active, what information is collected, and how your business uses or shares that information over time. A website can also change after the audit through new plugins, marketing tags or design updates. The report is intended to identify key issues and next steps, not to provide a permanent sign-off for every future version of the site.

That is exactly why a cookie audit is often more useful than a narrow banner review. Sometimes the visible wording is only part of the issue, and the bigger concern is how marketing, analytics or customer data flows work behind the scenes. If your business uses several tools that pass information to third parties, the recommendations may involve updates to notices, consent settings or internal processes. The right advice The document needs to line up with your actual privacy practices, including how information moves through the business, so we look at the practical setup rather than the banner in isolation.

Just submit an enquiry via this page or click the 'get started' button on our website to submit an enquiry. After you've submitted an enquiry, one of our legal consultants will review your enquiry within 1 business day and get in touch to get a better idea of exactly what you are looking for.

Then your legal consultant will send through an email with a bit more information about the services you need, along with a fixed fee quote setting out costs, scope of the service and timing. Have a read through it, and if you're happy with the scope, you can accept and sign our engagement letter online - easy!

Once you've formally accepted, we'll connect you with a specialist lawyer and they will work with you to complete your project. They will contact you by email or phone if they need to get in touch.

Sprintlaw works on fixed-fee pricing wherever possible, so you can review the scope and cost before you decide whether to proceed. For the Cookie Compliance Audit service, pricing starts from $900.00.

After you enquire, a legal consultant will confirm what is included, the expected timing and whether any extra work is needed before you engage us.

We operate completely online, which means we can help you wherever you are in New Zealand. We have office spaces in Sydney, and in Melbourne, but our use of technology allows our team members to work remotely from around the world. Our legal team are mostly based in Sydney, Melbourne, Brisbane and Perth. We also have a London office for Sprintlaw UK.

Our legal team is made up of experienced lawyers, who are specialists in various areas of law and hold an Australian legal practising certificate. None of our Sprintlaw lawyers are New Zealand qualified lawyers and they do not currently hold a New Zealand practising certificate.

They provide legal services working remotely from Australia via our 'legal consultancy' model, through which (under section 6 and section 35 of the New Zealand Lawyers and Conveyancers Act 2006) our Australian legal team are permitted to provide legal services to New Zealand businesses provided they do not provide services in certain 'reserved' areas of law. You can read our FAQ page to learn a bit more about our 'legal consultancy' model.

Given the strong similarities between Australian and New Zealand law, and the areas of law in which we practice (being small business and startup law), we do not view the fact that our lawyers have not qualified in New Zealand as having any substantive impact on the quality of our service. We are committed to ensuring that we provide high quality, affordable legal services to all our New Zealand clients.

Our legal team have all trained at leading firms, but have left the traditional corporate law world to join us on our mission to create a new and better way of delivering legal services. They have specialist expertise in technology law, intellectual property law, contract drafting and review, corporate law and commercial law.