What is a website privacy policy?
A website privacy policy is a public document that explains what personal data a business collects from visitors and customers, how it is used, and who it may be shared with.
Privacy & Compliance
Website Privacy Policy
Generate a website privacy policy compliant with the Personal Data Protection Act (PDPA) for your Singapore business.
- Create a privacy policy for an ecommerce website
Generate a PDPA-compliant privacy policy for the ecommerce website of [Business Name] (UEN [UEN Number]), covering collection of customer and payment data, cookies, and third-party disclosures.
- Create a privacy policy for a SaaS platform
Generate a privacy policy for the SaaS platform operated by [Company Name], covering collection of user account data, usage analytics, and any overseas data transfer, consistent with the PDPA.
- Create a privacy policy covering marketing and cookies
Generate a privacy policy for [Business Name] that covers the use of cookies, email marketing consent (including Do Not Call Registry considerations), and how users can withdraw consent or access and correct their personal data under the PDPA.
Website Privacy Policy Generator (Singapore)
A website privacy policy is a public statement explaining what personal data a Singapore business collects from website visitors and customers, how it is used, and with whom it may be shared, required under the Personal Data Protection Act (PDPA) for organisations that collect, use, or disclose personal data. This free Singapore privacy policy generator produces policies reflecting the PDPA's data protection obligations, covering consent, purpose limitation, notification, and access and correction rights. It is designed for Singapore ecommerce stores, SaaS platforms, and service businesses that collect personal data through their website, apps, or marketing activities. The generator lets you specify what data you collect (such as contact details, payment information, or cookies), how long it is retained, and whether it is transferred overseas. Use it to meet your PDPA obligations and give website visitors clear, transparent information about how their data is handled.
Frequently asked questions
Does my Singapore business need a privacy policy?
Yes, any organisation that collects, uses, or discloses personal data is covered by the Personal Data Protection Act (PDPA) and is generally required to have policies and practices, including a public privacy policy, to comply with the Act.
What are the key PDPA obligations a privacy policy should reflect?
Consent for collection and use, purpose limitation, reasonable security arrangements, data breach notification, and giving individuals access to and the ability to correct their personal data.
Does a privacy policy need to mention cookies?
Yes, if your website uses cookies or similar tracking technologies, the privacy policy should explain what they are used for and how visitors can manage their preferences.
Does the Do Not Call Registry affect my privacy policy?
If you send marketing messages, your policy should reflect compliance with Singapore's Do Not Call Registry rules under the PDPA in addition to general consent requirements.
What happens if there's a data breach in Singapore?
Under the PDPA, organisations must assess data breaches and notify the PDPC and affected individuals where the breach is likely to result in significant harm, and the privacy policy should reference how the business handles such incidents.