Privacy and GDPR
Privacy done properly, so you can stop worrying about it.
UK GDPR and PECR handled by the product itself: consent, retention, export and erasure, without a cookie banner in front of your valuation form.
Cookies
No cookie banner, unless you actually need one.
A stock Realist site stores nothing on a visitor’s device. Fonts, scripts and styles are served from your own site, and the map loads only when someone asks to see it. With nothing to consent to, there is no banner standing between a vendor and your valuation form.
- Add an analytics tracker and a consent banner appears with it
- Accept and Reject are the same size, the same colour and one click each
- The map’s consent panel names the service that will see the visitor

Leads
Every lead handled the way the law expects.
Each request is stored with the consent wording the person saw and the moment they agreed. Personal data is deleted on the schedule you set, and export and erasure requests made through WordPress include every lead the person sent.
- Retention you choose, applied automatically
- Monthly figures kept without the personal data behind them
- Privacy policy text supplied for your site

Security
Personal data on a site built to protect it.
Each agency’s site is isolated from every other, so a problem elsewhere cannot reach your data. Passwords for your CRM are encrypted, and the landlord portal encrypts every document it holds.
- Bot protection loads only when someone uses a form
- Every save and action checked for permission
- Separate encrypted vaults for identity documents

Included
Everything in the box, at no extra cost.
- No cookies or third-party requests on a stock site
- Self-hosted fonts, so visitors are not sent to Google
- Consent text and time recorded with every lead
- Automatic deletion after your retention period
- Export and erasure through WordPress’s own privacy tools
- Consent banner built in for when you add tracking
- Map tiles behind a Show map button
- Spam protection that sends nothing until a form is used
- Encrypted documents in the landlord portal
- An isolated site, never a shared database
Questions
Common questions.
Does Realist make us GDPR compliant?
No website can make an agency compliant by itself, because compliance covers how the whole office handles data. Realist takes care of the website’s part: what it collects, how it records consent, how long it keeps data and how it answers requests.
Why is there no cookie banner?
The law asks for consent before storing information on a visitor’s device. A stock Realist site stores nothing, so there is nothing to ask about. A banner shown anyway costs you enquiries and protects no one.
What if we want Google Analytics?
Add your measurement ID and a consent banner appears. Analytics loads only after a visitor presses Accept, and pressing Reject is just as easy.
How do we handle a request to delete someone’s data?
Use the erasure tool in WordPress with the person’s email address. It removes their leads from Realist along with everything else WordPress holds about them.
Keep reading
More of what Realist does.
Valuation leads and reports
Forms that never lose a lead, and a monthly report led by valuations.
Hosting and security
An isolated site per agency, updated, tested and looked after.
Landlord and tenant portal
Statements, certificates and tenancies in a secure portal of your own.