Free · No sign-up · Runs in your browser

Free Privacy Policy Generator

Answer a few questions about your site and the tools you use. The privacy policy updates as you go: sections for cookies, analytics, advertising, payments, GDPR and CCPA appear only when they apply.

Not legal advice. The documents on this site are generated from general templates. They are a starting point, not legal advice, and they are not guaranteed to meet the laws that apply to your business. Have the final text reviewed by a qualified lawyer in your jurisdiction before you publish it.

Your answers stay in your browser. Nothing is sent to a server or stored.

Privacy Policy

Template notice: This document was created with Pro100 Policy Generator (https://legal.pro100.sarl) from a general template. It is not legal advice and is not guaranteed to meet the legal requirements that apply to you. Have it reviewed by a qualified lawyer in your jurisdiction before you publish it, and remove this notice once it has been reviewed.

Effective date: [Effective date]

This Privacy Policy explains how [Your Business Name] ("we", "us" or "our") collects, uses and shares information about you when you use our website at [yourwebsite.com] (the "Service"). By using the Service, you acknowledge the practices described in this policy.

Information we collect

Information you provide to us

Depending on how you use the Service, we may collect:

your name
your email address

We collect this information when you fill in a contact form or email us.

Information collected automatically

When you visit or use the Service, we and our service providers may automatically collect:

information about how you use the Service, such as pages visited and actions taken
device and connection information, such as IP address, browser type and operating system

How we use your information

We use the information we collect for the following purposes:

To operate, maintain and improve our website.
To respond to your questions and requests.
To understand how visitors use the Service so we can improve it.
To protect the Service, prevent fraud and abuse, and keep it secure.
To comply with legal obligations and enforce our terms.

Cookies and similar technologies

We use cookies and similar technologies (such as local storage and pixels) to make the Service work, remember your preferences, understand how the Service is used. You can control or delete cookies through your browser settings. If you block some cookies, parts of the Service may not work as intended. Where the law requires it, we ask for your consent before placing non-essential cookies.

Analytics

We use Google Analytics to collect information about how visitors use the Service, such as pages viewed, time spent and the type of device used. This information helps us understand and improve the Service. The analytics provider processes this information under its own privacy policy.

How we share your information

We share personal information only as described below:

Service providers. We work with companies that help us run the Service, such as hosting and infrastructure providers and analytics (Google Analytics). They may access personal information only as needed to perform services for us.
Legal reasons. We may disclose information if we believe it is required by law, or to protect the rights, property or safety of us, our users or others.
Business transfers. If we are involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction.
With your consent. We may share information for other purposes when you ask us to or agree to it.

We do not sell your personal information.

Data retention

We keep personal information for as long as we need it for the purposes described in this policy, for example for as long as you have an account or as long as needed to provide the Service, and as required to meet legal, accounting or reporting obligations. When information is no longer needed, we delete or anonymize it.

Data security

We use reasonable technical and organizational measures to protect personal information. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

International data transfers

We and our service providers may process information in countries other than the one where you live. These countries may have data protection laws that differ from those in your country. Where required, we take steps to ensure your information receives an appropriate level of protection.

Your choices and rights

Depending on where you live, you may have rights over your personal information, such as the right to access, correct or delete it, or to object to certain uses. To make a request, contact us at [[email protected]]. We may need to verify your identity before responding. We will not discriminate against you for exercising your rights.

Additional information for users in the EEA and the UK

If you are in the European Economic Area (EEA) or the United Kingdom, the following applies in addition to the rest of this policy.

Controller. [Your Business Name] is the controller of your personal information and can be contacted at [[email protected]].

Legal bases. We process personal information on the following legal bases:

Contract: to provide the Service you requested and to perform our agreement with you.
Legitimate interests: to run, secure and improve the Service, where these interests are not overridden by your rights.
Consent: for example for non-essential cookies or marketing emails. You can withdraw your consent at any time.
Legal obligation: where we must process information to comply with the law.

Your rights. Subject to conditions and exceptions set out in applicable law, you have the right to access your personal information; to have it corrected; to have it erased; to restrict or object to its processing; to data portability; and to withdraw consent at any time without affecting processing that took place before withdrawal.

Complaints. You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work. We would appreciate the chance to address your concerns first, so please contact us.

International transfers. Where we transfer personal information outside the EEA or the UK to a country that is not considered to provide an adequate level of protection, we rely on appropriate safeguards, such as standard contractual clauses approved by the relevant authorities.

Additional information for California residents

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), applies to us.

Categories of personal information. In the past 12 months we may have collected the following categories of personal information:

Identifiers (such as name, email address, IP address)
Internet or other electronic network activity information

We collect this information from you directly, from your device automatically, and from our service providers. We use it for the purposes described in "How we use your information" and share it with the categories of recipients described in "How we share your information".

Your rights. Subject to certain exceptions, you have the right to:

know what personal information we collect, use and disclose;
request deletion of your personal information;
request correction of inaccurate personal information;
opt out of the "sale" or "sharing" of your personal information;
not be discriminated against for exercising these rights.

Sale or sharing. We do not sell or share personal information as those terms are defined in the CCPA.

How to make a request. Email us at [[email protected]]. We will verify your request by matching information you provide with information we hold. You may use an authorized agent to make a request on your behalf, and we may ask for proof of that authorization.

Children's privacy

The Service is not directed to children under 13 (or under 16 in some countries of the EEA), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

Links to other websites

The Service may contain links to websites and services that we do not operate. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page, and where the changes are significant we will take reasonable steps to let you know.

Contact us

If you have any questions about this Privacy Policy or want to exercise your rights, contact us:

By email: [[email protected]]
On our website: [yourwebsite.com]

What a privacy policy should cover

A privacy policy is a public statement of how you handle personal information. Regulators and users read it for the same reason: to understand what you collect, why, and what control people have. A clear policy usually covers:

Who you are and how to contact you.
What data you collect, both what people give you (forms, accounts, orders) and what is collected automatically (IP address, device, usage).
Why you use it: running the service, answering messages, processing orders, analytics, advertising, security.
Who you share it with: hosting, payment processors, email tools, analytics and ad networks.
Cookies and similar technologies, and how to control them.
How long you keep data and how you protect it.
People's rights and how to use them, with extra detail for regions such as the EU/UK and California.

How to use the generated policy

Fill in each step. Be honest about the tools you use; a policy that does not match your real practices can cause more trouble than having none.
Read the full text in the preview and change anything that does not fit your business.
Have it reviewed by a qualified lawyer, especially if you handle sensitive data, children's data or large volumes of data.
Copy the HTML into your site, or download the .html or .md file, and link it from your footer.
Update it whenever you add a new tool or start collecting new kinds of data.

A policy is not compliance

Publishing a privacy policy is only one part of handling data responsibly. Depending on where you and your users are, you may also need a cookie consent banner, data processing agreements with your providers, a way to answer access and deletion requests, and reasonable security. This generator does not check any of that. It gives you a readable starting point to discuss with a professional.

Frequently asked questions

Does my website need a privacy policy? +

If your site collects any personal data, including email addresses from a contact form, IP addresses in analytics or data used by ad networks, privacy laws in many countries expect you to explain it. Services like Google AdSense, Google Analytics and the app stores also require a privacy policy. A lawyer can tell you exactly what applies to you.

When should I include the GDPR section? +

Include it if you have visitors or customers in the European Union, the EEA or the United Kingdom. The GDPR can apply to businesses outside Europe when they offer goods or services to people there or monitor their behaviour, for example with analytics.

When should I include the CCPA section? +

The CCPA applies to for-profit businesses that do business in California and meet certain thresholds, such as annual revenue or the amount of personal information they handle. Many small sites are below those thresholds, but some include the section anyway. Ask a lawyer whether it applies to you.

Where should I put my privacy policy? +

Publish it on its own page, for example /privacy, and link to it from the footer of every page, from sign-up and checkout forms, and from your app store listing if you have an app.