See where your cookie setup may be exposed

It is commonly useful for businesses that rely on website analytics, advertising tools, embedded content, CRM integrations or other tracking technologies that collect information about visitors. That includes online stores, SaaS platforms, healthcare providers, agencies and lead-generation businesses. If your site uses a cookie banner but you are not sure whether it matches what is actually happening behind the scenes, an audit can be a sensible next step. It is especially relevant where multiple plugins, pixels or third-party tools have been added over time without a full legal review.

Common issues include banners that do not match the site's actual tracking behaviour, notices that are too vague about what tools are running, consent flows that are hard to understand, and cookies being set before the user has made a meaningful choice. We also often see gaps between the public-facing wording and the way the For Cookie Compliance Audit, the wording should follow your real information flows. For Cookie Compliance Audit, collection points and disclosure practices shape the drafting. through analytics, advertising or embedded tools. The legal position depends heavily on what happens in practice, not just what the policy says on paper.

The service includes a legal review of your website's cookies and trackers, the consent interface shown to users, and the related wording used in notices or policies within the agreed scope. You receive a written report identifying the main legal concerns and practical recommendations for improvement. This is broader than a one-off question about a banner because it looks at the overall cookie and consent picture. It does not include coding changes, implementation by developers, security remediation, or ongoing monitoring after the audit is completed.

No. You receive practical guidance on the issues in scope, while any broader risk position depends on your documents, conduct and implementation. That is because the answer can change depending on how your site is configured, what third-party tools are active, what information is collected, and how your business uses or shares that information over time. A website can also change after the audit through new plugins, marketing tags or design updates. The report is intended to identify key issues and next steps, not to provide a permanent sign-off for every future version of the site.

That is exactly why a cookie audit is often more useful than a narrow banner review. Sometimes the visible wording is only part of the issue, and the bigger concern is how marketing, analytics or customer data flows work behind the scenes. If your business uses several tools that pass information to third parties, the recommendations may involve updates to notices, consent settings or internal processes. The right advice The document needs to line up with your actual privacy practices, including how information moves through the business, so we look at the practical setup rather than the banner in isolation.

Submit an enquiry on this page or click 'Get started'. One of our legal consultants will review it within 1 business day and get in touch to understand what you need.

Your consultant will then email you a fixed-fee quote setting out the cost, scope and timing. If you're happy with it, you can accept the quote and sign our engagement letter online.

Once you've accepted, one of our Australian-qualified lawyers will work with you to complete your project. They'll contact you by email or phone if they need anything.

Sprintlaw works on fixed-fee pricing wherever possible, so you can review the scope and cost before you decide whether to proceed. For the Cookie Compliance Audit service, pricing starts from $900.00.

After you enquire, a legal consultant will confirm what is included, the expected timing and whether any extra work is needed before you engage us.

We work online, so we can help wherever you are in New Zealand. Our team works remotely, mainly from Australia.

Your work is done by our Australian-qualified lawyers, who hold Australian practising certificates and specialise in business law. None of them are New Zealand lawyers or hold a New Zealand practising certificate.

Sprintlaw NZ Limited is a legal consultancy, not a law firm, and is not regulated by the New Zealand Law Society. We don't act in court or tribunal matters, conveyancing (including leases and business sales) or other reserved areas of work. Communications with Sprintlaw are unlikely to be protected by legal professional privilege. We still keep everything confidential under our engagement letter.