I've received a PM from Mike with his url.

His issue is that he has a Data Protection document that even on the desktop version is LONG. However I would question if he even needs to place this on his site.

Xara sites don't create first party cookies and I expect his site isn't either (He can check this using online links)
Secondly his site isn't gathering data online either (i.e. Name, Address, Telephone nos or debit/credit card details) He may be doing so at his place of business and if so will need a data protection policy, but from what I understand it's not required on his site in it's current state.