Privacy Policy Generator

Answer honestly about what data you actually collect and share — a Privacy Policy that doesn't match what your business actually does isn't compliant, however well-written it is.

Before you create your draft

The business remains responsible for accurately describing its real data collection, sharing, retention and processing practices.

We use the OpenAI API to turn your answers into a personalised first draft. Do not include unnecessary information. We retain substantive content for 14 days, then schedule deletion, which may take up to 24 hours. See our Privacy Policy for OpenAI's separate retention.

Business details

Business name

Trading address

Contact email (for privacy queries and ICO/data-subject requests)

Company registration number (optional)

Data Protection Officer contact, if you have one (optional)

Business type

What best describes your business?

What data do you collect?

NameEmail addressPhone numberPostal / mailing addressPayment informationIP address / device informationCookies / tracking identifiersLocation data

Anything else you collect (optional)

What do you use the data for?

Provide or deliver the serviceEmail marketing (with opt-in)Analytics / understanding how the service is usedFraud preventionCustomer support

Any other use (optional)

Third-party services

Do you share data with any of these?

Payment processor (e.g. Stripe, PayPal)Email marketing platform (e.g. Mailchimp)Analytics (e.g. Google Analytics, Plausible)Cloud storage / hosting (e.g. AWS, Google Cloud)CRM (e.g. HubSpot, Salesforce)Social media integrations

Name the specific tools (optional, e.g. "Stripe, Mailchimp, Google Analytics")

Our website/app uses cookies or similar tracking

International data transfers

Personal data is transferred outside the UK/EEA (e.g. a US-based tool)

Marketing

We offer an email newsletter or marketing sign-up

Data retention

How long do you keep each data category, or what criteria determine deletion?

Special category data (optional)

We collect sensitive data (health, racial/ethnic origin, religious or political beliefs, sexual orientation, biometric data)

Children's data (optional)

Our service is directed at, or used by, children under 18