Create a clear, plain-English privacy policy for your website, tailored to what your site actually does, for the UK, EU or elsewhere.
Loading the tool…
Why you need a privacy policy
If your website collects any personal data, such as names and emails from a contact form, analytics data or cookies, data protection law in the UK and EU requires you to tell people what you collect, why, and what rights they have. Services such as Google AdSense and Analytics also require a privacy policy.
What it covers
- Who you are and how to contact you.
- What personal data you collect.
- Why you use it and your lawful basis.
- Cookies.
- Who you share it with.
- How long you keep it.
- People’s rights, and how to complain.
After you generate it
- Read it through and make sure it matches what your site really does.
- Add it as a page on your site and link to it from your footer.
- If you use non-essential cookies, you also need a cookie consent banner.
- Update it whenever you add new tools, forms or tracking.
This tool creates a starting template, not legal advice. If you handle sensitive data or children’s data, get professional advice.
Frequently asked questions
Do I need a privacy policy for a small website?
If you collect any personal data, including through analytics, forms or cookies, yes in the UK and EU.
Is this privacy policy GDPR compliant?
It covers the main things UK GDPR and EU GDPR require you to tell people. Compliance also depends on how you actually handle data.
Do I need one for Google AdSense?
Yes. Google requires sites showing AdSense ads to have a privacy policy that explains cookies and advertising.
Where do I put my privacy policy?
On its own page, linked from your website footer and anywhere you collect data.
Last updated: