What is a website privacy policy?
A website privacy policy is a public document that explains what personal data a business collects from visitors and customers, how it is used, and who it may be shared with.
Privacy & Compliance
Website Privacy Policy
Generate a website privacy policy compliant with UK GDPR and the Data Protection Act 2018 for your UK business.
- Create a privacy policy for an ecommerce website
Generate a UK GDPR-compliant privacy policy for the ecommerce website of [Business Name] (Company No. [Companies House Number]), covering collection of customer and payment data, cookies, and third-party disclosures.
- Create a privacy policy for a SaaS platform
Generate a privacy policy for the SaaS platform operated by [Company Name], covering collection of user account data, usage analytics, and any international data transfer, consistent with UK GDPR.
- Create a privacy policy covering marketing and cookies
Generate a privacy policy for [Business Name] that covers the use of cookies under PECR, email marketing consent, and how users can exercise their UK GDPR rights, including access, correction, and erasure.
Website Privacy Policy Generator (UK)
A website privacy policy is a public statement explaining what personal data a UK business collects from website visitors and customers, how it is used, and with whom it may be shared, required under UK GDPR and the Data Protection Act 2018 for any business processing personal data. This free UK privacy policy generator produces policies reflecting the UK GDPR's lawful bases for processing, data subject rights, and transparency requirements, alongside the direct marketing rules in the Privacy and Electronic Communications Regulations (PECR). It is designed for UK ecommerce stores, SaaS platforms, and service businesses that collect personal data through their website, apps, or marketing activities. The generator lets you specify what data you collect (such as contact details, payment information, or cookies), how long it is retained, and whether it is transferred outside the UK. Use it to meet your UK GDPR obligations and give website visitors clear, transparent information about how their data is handled.
Frequently asked questions
Does my UK business need a privacy policy?
Yes, any business processing personal data is subject to UK GDPR and the Data Protection Act 2018 and is generally required to provide individuals with transparent information about that processing, typically through a privacy policy.
What are the key UK GDPR requirements a privacy policy should reflect?
The lawful basis for processing, what data is collected and why, how long it is retained, who it may be shared with, and the data subject rights available, including access, correction, erasure, and objection.
Does a privacy policy need to mention cookies?
Yes, and cookie use is also separately regulated under the Privacy and Electronic Communications Regulations (PECR), which generally requires consent for non-essential cookies.
What happens if personal data is transferred outside the UK?
The business must ensure an adequate safeguard is in place, such as UK adequacy regulations or standard contractual clauses, and the privacy policy should disclose international transfers.
What happens if there's a data breach in the UK?
Businesses must generally notify the ICO within 72 hours of becoming aware of a breach likely to result in a risk to individuals, and notify affected individuals directly if the risk is high, and the privacy policy should reference how breaches are handled.