⬇ Download the privacy policy template (.md)
Plain Markdown — paste into your CMS, Notion, Google Docs or Word.
Want it generated to match exactly what you do? Use the free privacy notice generator.
How to adapt it — honestly
- Replace every [bracketed] field.
- Edit the purposes table so it lists what your site actually does. A policy describing processing you don't do is a violation waiting to be found.
- Name your real processors (hosting, email, analytics) — each needs an Art. 28 data processing agreement.
- Set concrete retention periods, not "as long as necessary".
- Publish with a visible link in your footer and a "last updated" date.
When a template is not enough
- You process special-category data (health, biometrics) — get proper advice.
- You monitor behaviour at scale or are a public body — a DPIA may be mandatory.
- You transfer data outside the EU/EEA without an adequacy decision — SCCs need real attention.
Related free tools
- Privacy notice generator — build the notice from your actual purposes
- RoPA template — the Article 30 register behind every good policy
- Free cookie & tracker check — see what your site really loads
- GDPR website compliance checklist