What is a website privacy policy?
A website privacy policy is a public document that explains what personal data a business collects from visitors and customers, how it is used, and who it may be shared with.
Privacy & Compliance
Website Privacy Policy
Generate a website privacy policy compliant with the Personal Data (Privacy) Ordinance for your Hong Kong business.
- Create a privacy policy for an ecommerce website
Generate a PDPO-compliant privacy policy for the ecommerce website of [Business Name], covering collection of customer and payment data, cookies, and third-party disclosures.
- Create a privacy policy for a SaaS platform
Generate a privacy policy for the SaaS platform operated by [Company Name], covering collection of user account data, usage analytics, and any cross-border data storage or disclosure, consistent with the PDPO Data Protection Principles.
- Create a privacy policy covering marketing and cookies
Generate a privacy policy for [Business Name] that covers the use of cookies, email marketing consent, and how users can opt out or access and correct their personal data under the PDPO.
Website Privacy Policy Generator (Hong Kong)
A website privacy policy is a public statement explaining what personal data a Hong Kong business collects from website visitors and customers, how it is used, and with whom it may be shared, required under the Personal Data (Privacy) Ordinance (PDPO) for any business that collects personal data. This free Hong Kong privacy policy generator produces policies reflecting the six Data Protection Principles (DPPs) under the PDPO, covering collection, accuracy, use, security, openness, and access and correction rights. It is designed for Hong Kong ecommerce stores, SaaS platforms, and service businesses that collect personal data through their website, apps, or marketing activities. The generator lets you specify what data you collect (such as contact details, payment information, or cookies), how long it is retained, and whether it is disclosed outside Hong Kong. Use it to meet your PDPO obligations and give website visitors clear, transparent information about how their data is handled.
Frequently asked questions
Does my Hong Kong business need a privacy policy?
Any business that collects personal data from customers or website visitors is covered by the Personal Data (Privacy) Ordinance (PDPO) and should have a policy explaining its data handling practices.
What are the Data Protection Principles under the PDPO?
The PDPO sets out six Data Protection Principles covering collection purpose and manner, accuracy and retention, use, security, openness (including having a privacy policy), and access and correction rights.
Does a privacy policy need to mention cookies?
Yes, if your website uses cookies or similar tracking technologies, the privacy policy should explain what they are used for and how visitors can manage their preferences.
What happens if personal data is sent outside Hong Kong?
Businesses should take care when transferring personal data outside Hong Kong and disclose in the privacy policy where data is sent, since cross-border transfer restrictions under the PDPO can be triggered by future government notice.
What should happen if there's a data breach in Hong Kong?
While mandatory breach notification is not currently required for all businesses, the PCPD encourages voluntary notification for serious breaches, and the privacy policy should reference how the business handles incidents involving personal data.