Your website could be the reason a demand letter shows up.
Most small business websites send visitor data to Google, Meta and others the instant a page loads, before anyone agrees to it. That is exactly what privacy demand letters target. We install, configure and manage the fix for you.
This letter came in the mail for a LOJO client.
It arrived by first-class mail with a ten-page lawsuit attached, already marked “ready to be filed.” Names and addresses are blurred. The claims are real.
- 1It cites a privacy law, not a data breachThe letter claims the website “installed and used multiple pen registers” under California’s Invasion of Privacy Act. Nothing was hacked or stolen.
- 2The evidence is ordinary analyticsThe attached complaint points to Google Analytics firing the moment the home page loaded, sending the visitor’s IP address and browser details.
- 3No banner, no consentIt argues no consent banner appeared before tracking started, and a privacy link in the footer is not consent.
- 4It asks for money and a rebuilt websiteStatutory damages for each violation, court costs, and an order to block all third-party scripts until visitors opt in.
COMPLAINT ATTACHED
Tracking fires before your visitor says yes.
Analytics, ad pixels and chat tools load the moment someone opens your site. Without a consent banner that actually holds them back, your website shares visitor data before anyone agrees.
A complete privacy setup, managed by LOJO.
Built on Enzuzo, a Google-certified consent platform trusted by more than 30,000 businesses, and installed and managed by our team so you never touch a setting.
Protected in four steps.
California’s SB 690, signed September 30, 2026 and effective January 1, 2027, stops private lawsuits over the “pen register” claim used in letters like the one above.
But wiretapping claims under the same law still allow private suits, the California Attorney General can still enforce the pen register rule, and other states and privacy laws such as the CCPA and GDPR still expect consent and clear policies. Showing visitors a real choice and keeping proof of it remains the best protection available.
One simple plan per website.
Everything above, installed and managed for you. No long-term contract.
Protected sites can show this badge in their footer.
- Covers one website
- Month to month, cancel with 30 days notice
- Pay by card at checkout (3% processing fee)
- Additional websites added to your order
Questions we hear
Is this legal advice?
No. LOJO is a marketing and website company, not a law firm. Website Privacy Protection is a risk-reduction service. For questions about your legal obligations, talk with your attorney.
Does this guarantee I will never get a demand letter?
No service can promise that. A consent banner that blocks tracking until visitors agree, plus clear policies and consent records, is widely seen as one of the most effective ways to reduce your exposure.
I already received a letter. Can you help?
Please contact your attorney about the letter itself. We can install protection right away so your website stops sharing data without consent going forward.
My business is not in California. Do I need this?
Letters target any website California residents visit, and other states and countries have their own privacy rules. If your site uses analytics or ad pixels, it is worth protecting.
Will this hurt my ad tracking?
Google Consent Mode v2 and Microsoft Consent Mode let the ad platforms model conversions even when some visitors opt out, so your campaigns keep learning.
What happens if I cancel?
We remove the banner and the legal pages we host, and on request we send you the current text of your legal pages so you can set up your own.
Protect your website this week.
$399 one-time setup, then $79 per month. Month to month, cancel with 30 days notice.