This website privacy policy template has been designed to help website owners comply with European Union and United Kingdom data protection legislation. This includes compliance with the General Data Protection Regulation (GDPR) in both its original EU and derivative UK forms.

The policy covers all the usual ground: the categories of personal data that are collected, the purposes for which that personal data may be used, the legal bases for processing, the persons to whom the personal data may be disclosed, international transfers of personal data, the security measures used to protect the personal data, individual rights and website cookies.

First published in 2008, this policy and its antecedents have been used on hundreds of thousands of websites. It is frequently since to reflect the GDPR and the developing regulatory guidance from the EU and UK data protection authorities.

If you’re new to data protection law, then before downloading the policy you might want to review the questions and answers below, which provide a introduction to both the legal and practical issues around the use of privacy policies.