Some GDPR resources and checklists which I found useful for anyone running a website:

https://www.dataprotection.ie/docs/Self-Asses...t/y/22.htm

https://ico.org.uk/media/about-the-ico/consul...201703.pdf

https://ico.org.uk/for-organisations/guide-to...checklist/

https://ico.org.uk/for-organisations/resource...ssessment/

https://ico.org.uk/media/for-organisations/do...otices.pdf