Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Maguru is a European marketing service for tradespeople and small businesses, combining template websites, SEO, Google Ads management and call tracking. The websites and campaigns it runs typically set cookies and may use third party advertising tools.
Maguru is described as a Copenhagen based marketing service for tradespeople and small businesses. It bundles template based websites, search engine optimisation, Google Ads management and call tracking so that craftsmen can attract and convert local customers without managing each tool separately.
Maguru gathers the tools and services a small trades business needs for online marketing into one package. It builds and hosts a website optimised for search and conversion, runs paid campaigns and uses call tracking to show which marketing source generated each phone enquiry.
The websites Maguru produces typically set first party cookies plus analytics and advertising cookies, and load third party scripts such as Google Analytics and Google Ads. Call tracking assigns phone numbers and records call metadata, and sometimes call recordings, to attribute leads. Visitor identifiers, IP addresses and call details are personal data.
Analytics and advertising cookies require prior consent under the ePrivacy Directive, and call tracking processes personal data under the GDPR. If calls are recorded, callers must be informed and given a basis to object. As the business running the site you are the controller and need a consent banner, clear notices and a data processing agreement with Maguru.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Maguru itself is expected to process within the EEA as a European company, but the Google advertising and analytics tools it commonly uses can transfer data to the United States. Identify the actual sub processors and ensure transfers rely on Standard Contractual Clauses or the EU US Data Privacy Framework.
Deploy a consent banner that blocks analytics and advertising cookies until accepted, disclose call tracking and any call recording, sign a data processing agreement, list sub processors and transfer safeguards, and keep your cookie and privacy notices aligned with the scripts actually running on the site.
Websites using Maguru must obtain user consent under GDPR regulations.
DPIA considerations
A full data protection impact assessment is not usually mandatory, but document a short assessment covering the call tracking, the advertising and analytics scripts on the websites Maguru builds, the lawful basis for marketing cookies and any transfers introduced by Google or similar tools. Call recordings, if used, warrant extra attention.
Sample consent text
This site, built and managed with Maguru, uses cookies for analytics, advertising and call tracking, which may involve third party tools and transfers outside the EEA. Click Accept to allow these cookies, or Reject to keep only essential ones.
Third-party domains contacted
maguru.comgoogle-analytics.comgoogleadservices.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| Session cookie | Necessary | Session | Maintains the session on the Maguru built website. |
| Analytics cookie | Analytics | Up to 2 years | Set by analytics tools such as Google Analytics to measure visits and traffic sources on the website. |
| Advertising cookie | Marketing | Up to 1 year | Set by advertising tools such as Google Ads to measure campaign conversions and support remarketing. |
| Call tracking cookie | Marketing | Up to 90 days | Used by the call tracking feature to attribute phone enquiries to a marketing source by assigning a dynamic phone number to the visitor. |
Maguru places tracking cookies for advertising — comply with GDPR using FlowConsent.
The websites Maguru builds typically set first party cookies for the site itself plus analytics and advertising cookies, and load third party scripts such as Google Analytics and Google Ads. Call tracking adds dynamic phone numbers and visitor identifiers. The exact set depends on your configuration, so review the cookies actually loaded.
Yes. Analytics and advertising cookies on the Maguru built website require prior consent under the ePrivacy Directive, and call tracking and any call recording require clear information and a lawful basis. Only strictly necessary cookies may load before consent.
Non essential cookies and the advertising and analytics processing rely on consent under Article 6(1)(a) of the GDPR and the ePrivacy Directive. Call tracking may rely on consent or, for basic attribution, legitimate interests with a balancing test, but call recording should be supported by clear consent or notice.
Maguru itself, as a European company, is expected to process within the EEA, but the Google advertising and analytics tools it commonly uses can transfer data to the United States. Where US tools are involved, rely on Standard Contractual Clauses or the EU US Data Privacy Framework and document this.
A full data protection impact assessment is not usually mandatory, but a short documented assessment is advisable covering call tracking, any call recording, the advertising and analytics scripts and any transfers introduced by Google. If you record calls or build detailed profiles, the case for a DPIA is stronger.
Use a consent banner that blocks analytics and advertising cookies until accepted, disclose call tracking and any recording, sign a data processing agreement, list sub processors and transfer safeguards and keep the cookie and privacy notices aligned with the scripts running on the site.
Alternatives include other local marketing and website services for small businesses, general website builders combined with a separate consent tool, and standalone call tracking providers. Compare which sub processors they use, whether they host in the EU and how they handle consent and call recording.
List the analytics and advertising cookies and any third party tools such as Google, explain the call tracking and whether calls are recorded, state any transfers outside the EEA and their safeguards, name Maguru and its sub processors and keep the policy aligned with the scripts actually present on the site.