← Return to Menu
🏢

What is your organization's name?

The legal name of your business or organization

📍

What is your registered address?

Your official business address including postcode

📧

How can people contact you about privacy?

Your privacy contact information

🌐

What is your website URL?

The website this privacy policy applies to

👤

Do you have a Data Protection Officer?

Required for public authorities and large-scale data processors

Most small businesses don't need a DPO. It's required if you're a public authority or process data on a large scale.
❌
No DPO
(not required)
✅
Yes, we have
a DPO
📊

What personal data do you collect?

Select all types that apply

➕

Any other types of data?

List any additional personal data you collect

⚠️

Do you process sensitive data?

Special category data under GDPR

Special category data includes: health, race/ethnicity, religion, politics, sexual orientation, trade union membership, genetics, biometrics
❌
No special
category data
🔒
Yes, we process
sensitive data

Select types of special category data:

⚖️

Do you process criminal conviction data?

For example, DBS checks for employees

❌
No criminal
data
🔍
Yes, DBS checks
or similar
🎯

Why do you process personal data?

Select all purposes that apply

📝

Any other processing purposes?

Add any specific purposes not listed

🍪

What types of cookies do you use?

UK PECR requires consent for non-essential cookies

🔒
Essential
cookies only
📊
Essential +
Analytics
🎯
All types
including marketing
🔄

Who do you share data with?

Third parties and service providers

🌍

Do you transfer data internationally?

Outside the UK to other countries

Post-Brexit, transfers outside UK need safeguards. EU has adequacy for UK. US transfers need SCCs or Data Privacy Framework.
🇬🇧
UK only
🇪🇺
UK and EU/EEA
🇺🇸
UK, EU and USA
🌐
Global transfers
⏰

How long do you keep data?

Your general retention period

UK law requires 6 years for financial records, 3 years for PAYE, 6 years for contracts
🎯
Until purpose
fulfilled
📅
3 years after
last interaction
⚖️
6 years
(UK legal)
💰
7 years
(financial)
📋

Any specific retention periods?

Different periods for different data types

👶

Are your services for children?

UK digital age of consent is 13

🔞
Not directed
at children
👦
13+ only
👶
Includes
under 13s
👨‍👩‍👧‍👦
Mixed
audience
🔒

What security measures do you use?

Technical and organizational measures

⚡

How quickly will you respond to data requests?

GDPR requires response within 30 days

📅
30 days
(GDPR standard)
⚡
Faster
(e.g., 14 days)
📝

Final policy details

When does this policy take effect?

Your Privacy Policy is Ready

Review your GDPR & UK Data Protection compliant privacy policy below

Export to Word for bespoke situations where additional customization or manual editing is required beyond the standard template.

Limited Time Offer

Unlock Your Privacy Policy Now

Get instant access to both the Interview Version (this one) and the Editor Version in Word & PDF formats

✔ Interview Version (Guided)
✔ Editor Version (Manual)
✔ Word & PDF Formats
✔ Lifetime Free Updates
✔ Print Unlimited Copies
✔ Use Forever
£10
One-Time Payment
No subscriptions, ever

Lifetime Access • Editor & Interview formats • Lifetime updates • No subscription

⚖️ Qualified Legal Professional Expert-Reviewed Privacy Policy Template

This privacy policy has been carefully drafted and reviewed by a qualified legal professional to ensure GDPR and UK Data Protection Act compliance. It provides a strong legal foundation but is not a substitute for personalised advice. Your purchase includes lifetime access to this document via our secure online portal, with free updates for 12 months. For tailored guidance and complete peace of mind, you can book a consultation with one of our legal professionals here.

📞 Book Consultation