Privacy Policy Generator
Answer a few questions about what personal data you collect and why, and get a UK GDPR privacy notice with lawful bases, retention periods, your visitors’ rights and how to complain.
About this tool
A privacy notice has to tell people who you are, what personal data you collect, why, the lawful basis for each purpose, who you share it with, whether it leaves the UK, how long you keep it, their rights and how to complain. This generator writes each of those sections from your answers, picking the usual lawful basis for each kind of data (contract for orders, consent or the soft opt-in for marketing, legitimate interests for enquiries and security) and a typical retention period, such as six years for order records that HMRC can ask to see.
It reflects the Data (Use and Access) Act 2025 changes now in force: first-party analytics can run without consent if you explain it and offer a simple opt-out, and since 19 June 2026 every organisation must have a way for people to complain to it directly and acknowledge complaints within 30 days. Anything in [square brackets] still needs your details. Copy it formatted for Word or Google Docs, or download it as HTML, Markdown or plain text. Your answers are remembered on this device.