What is a website privacy policy?
A website privacy policy is a public document that explains what personal information a business collects from visitors and customers, how it is used, and who it may be shared with.
Privacy & Compliance
Website Privacy Policy
Generate a website privacy policy compliant with the Privacy Act 1988 and Australian Privacy Principles for your Australian business.
- Create a privacy policy for an ecommerce website
Generate a Privacy Act 1988-compliant privacy policy for the ecommerce website of [Business Name] (ABN [ABN Number]), covering collection of customer and payment data, cookies, and third-party disclosures.
- Create a privacy policy for a SaaS platform
Generate a privacy policy for the SaaS platform operated by [Company Name], covering collection of user account data, usage analytics, and any overseas data storage or disclosure, consistent with the Australian Privacy Principles.
- Create a privacy policy covering marketing and cookies
Generate a privacy policy for [Business Name] that covers the use of cookies, email marketing consent, and how users can opt out or access and correct their personal information under the Australian Privacy Principles.
Website Privacy Policy Generator (Australia)
A website privacy policy is a public statement explaining what personal information an Australian business collects from website visitors and customers, how it is used, and with whom it may be shared, required under the Privacy Act 1988 for most businesses with an annual turnover over $3 million and for certain smaller businesses handling sensitive data. This free Australian privacy policy generator produces policies reflecting the 13 Australian Privacy Principles (APPs), covering collection, use, disclosure, storage, and access and correction rights. It is designed for Australian ecommerce stores, SaaS platforms, and service businesses that collect personal information through their website, apps, or marketing activities. The generator lets you specify what data you collect (such as contact details, payment information, or cookies), how long it is retained, and whether it is disclosed overseas. Use it to meet your Privacy Act obligations and give website visitors clear, transparent information about how their data is handled.
Frequently asked questions
Does my Australian business need a privacy policy?
Businesses with an annual turnover over $3 million, health service providers, and certain other businesses are covered by the Privacy Act 1988 and generally need a compliant privacy policy; smaller businesses often adopt one voluntarily as good practice.
What are the Australian Privacy Principles?
The APPs are 13 principles under the Privacy Act 1988 covering how personal information must be collected, used, stored, disclosed, and made available for access and correction.
Does a privacy policy need to mention cookies?
Yes, if your website uses cookies or similar tracking technologies, the privacy policy should explain what they are used for and how visitors can manage their preferences.
What happens if personal data is sent overseas?
Under APP 8, businesses must take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs, and the privacy policy should disclose if and where data is sent overseas.
What should happen if there's a data breach in Australia?
Eligible data breaches likely to cause serious harm must generally be reported to the OAIC and affected individuals under the Notifiable Data Breaches scheme, and the privacy policy should reference how breaches are handled.