Privacy policy, terms & cookie policy generator

Privacy Policy

Effective date: [Effective date]

This Privacy Policy explains how [Company name] (“we”, “us” or “our”) collects, uses and shares personal information when you use [Website or app name], our website, and the services we offer through it.

Who we are

[Website or app name] is operated by [Company name]. We are responsible for the personal information described in this policy. For the purposes of the EU and UK General Data Protection Regulation we are the data controller.

Information we collect

Depending on how you use our services, we may collect the following information:

Contact details you give us, such as your name, email address and phone number, for example when you fill in a form or write to us.
Device and usage information collected automatically when you use our website, such as your IP address, browser and device type, operating system, pages or screens viewed, referring pages and the date and time of your visit.

We collect this information directly from you, automatically from your device, and from service providers that work on our behalf.

How we use your information

To provide, operate and maintain our website.
To respond to your questions and requests and provide customer support.
To understand how our services are used, measure performance and improve them.
To protect our services and users, including detecting and preventing fraud, abuse and security incidents.
To comply with legal obligations and to establish, exercise or defend legal claims.

Cookies and similar technologies

We use cookies and similar technologies, such as local storage and pixels, to make our website work, to measure how it is used. Where the law requires it, we ask for your consent before setting non-essential cookies, and you can change your choice at any time. Our Cookie Policy explains this in more detail.

How we share information

We share personal information only as described here. We use service providers for hosting and content delivery and analytics, who process information on our behalf and under our instructions.

With authorities, courts or other parties when we believe the law requires it, or to protect the rights, property or safety of our users, the public or ourselves.
With a buyer or successor if our business is sold, merged or reorganised, in which case this policy continues to apply to your information.
With other parties when you ask us to or give your consent.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

International transfers

Our service providers may process personal information in countries other than the one where you live, including the United States, whose data protection laws may differ from yours. When we transfer personal information out of the European Economic Area or the United Kingdom, we rely on an adequacy decision or on safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

How long we keep information

We keep personal information for as long as you have an account or use our services, and for a reasonable period afterwards to comply with legal obligations, resolve disputes and enforce our agreements. We then delete it or make it anonymous.

Security

We use reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will take steps to delete it.

Your choices

You can control cookies through our cookie settings, where available, and through your browser.
Depending on where you live, you may have the right to access, correct or delete your personal information. The sections below describe additional rights for some regions.

Additional information for some regions

European Economic Area and United Kingdom

If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

Performance of a contract: to provide the services you request.
Legitimate interests: to secure, improve and promote our services, where those interests are not overridden by your rights.
Consent: for example for non-essential cookies; you can withdraw consent at any time.
Legal obligation: to keep records and respond to lawful requests.

You have the right to access your personal information, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing. To make a request, contact us using the details below. We will respond within one month, which may be extended where the law allows.

You also have the right to complain to a data protection authority, such as the supervisory authority in your EU country or, in the UK, the Information Commissioner's Office (ico.org.uk).

California and other US states

If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you specific rights. In the past 12 months we have collected the following categories of personal information: identifiers, such as your name, email address and IP address; internet or other electronic network activity, such as pages viewed and interactions. We collect it from the sources and use it for the purposes described above, and we disclose it to the service providers listed in this policy for business purposes.

We do not sell or share personal information as those terms are defined in the CCPA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.

You have the right to know what personal information we collect, use and disclose; to request deletion or correction of your personal information; to opt out of the sale or sharing of personal information; and not to be discriminated against for exercising these rights. You can submit a request by contacting us at [Contact email]. We will verify your request by matching information you provide with information we hold, and you may use an authorised agent to make a request on your behalf.

Residents of other US states with comprehensive privacy laws may have similar rights and can contact us in the same way. If we decline a request, you may appeal by replying to our decision.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date and, if the changes are significant, let you know by other means as well, such as an email or a notice in our services.

Contact us

If you have questions about this document or want to exercise your rights, contact [Company name] at [Contact email].

How to use Privacy policy & terms generator

1
Describe your site
Enter your business name, site address, contact email and where you're based, then tick the personal data you collect and the services you use.
2
Choose the regions
Tick the European Economic Area, the UK or California to add their rights sections, and say whether ad partners track visitors across sites.
3
Review the drafts
Switch between the privacy policy, terms of use and cookie policy; highlighted placeholders show what still needs an answer.
4
Copy or download
Copy formatted text into your CMS, or download HTML, Markdown or plain text, then have the result checked before you publish.

Limits and Pro

Free: all 3 documents, the EEA, UK and California sections, copy and download as HTML, Markdown or plain text, cookie tables up to 10 rows, and 1 draft autosaved in this browser.

Pro adds Word (.docx) downloads and cookie tables of up to 100 rows. See Pro

About Privacy policy & terms generator

Privacy policy generator drafts three documents from one questionnaire: a privacy policy, terms of use and a cookie policy. Each answer switches whole clauses on or off. Ticking user accounts adds account terms and a sign-in purpose; purchases add billing data, a refund window and, for subscriptions, renewal and cancellation wording; analytics and advertising add cookie categories and sharing language. Regional sections are optional: the EEA and UK sections set out legal bases, data-subject rights, international transfers and the right to complain, and the California section covers the CCPA as amended by the CPRA, including a sale-or-sharing statement that follows your answer about cross-site ad tracking.

The clauses are written in plain English and deliberately cautious. They describe what your answers say you do, use “may” where practice varies, keep consumer rights that cannot be signed away, and leave a highlighted placeholder wherever information is missing. The cookie policy can include a table, with one-click presets for Google Analytics 4, Google AdSense, Stripe and the Meta Pixel.

It is a template, not legal advice. It does not know your contracts, your industry rules or the exact data your plugins collect; it does not cover health, financial or children's data in depth, and it never makes a site compliant on its own. Use it as a well-structured first draft and have it reviewed by a qualified lawyer.

Privacy

Your answers are turned into documents by code running in this tab and are saved only in this browser's local storage as one draft, so you can come back to them. Nothing you type is sent to our server; clearing the answers or your browser data deletes the draft.

Features

Three linked documents

Optional regional sections

EEA and UK GDPR rights and transfers, plus CCPA/CPRA for California and other US states.

Ready to paste

Formatted copy for editors, or HTML, Markdown and plain text downloads with highlighted gaps.

Privacy policy & terms generator: frequently asked questions

Does a generated privacy policy make my site GDPR compliant?

No. A policy only describes how you handle personal data; compliance depends on what you actually do, such as having a lawful basis, honouring access and deletion requests, signing processor agreements and securing data. This generator gives you a structured draft that reflects your answers. Check each sentence against your real practices and have a lawyer review it, especially if you handle sensitive data.

Do I need a privacy policy for a small website?

Usually yes. Laws such as the GDPR and the CCPA, app stores, Google AdSense and most analytics services expect a privacy policy whenever you collect personal data, and almost every site collects IP addresses in server logs or through analytics. A contact form, newsletter or cookie banner makes one even more clearly necessary. Having one also tells visitors who to contact about their data.

What is the difference between terms of use and a privacy policy?

Terms of use are the rules of your service: who may use it, what is forbidden, who owns content, how purchases and refunds work and which law applies. A privacy policy explains what personal data you collect, why, who receives it and what rights people have. Most sites publish both, and a cookie policy that details the cookies and how to refuse them.

When should I add the California (CCPA) section?

Add it if people in California use your site and your business could fall under the CCPA, for example by passing its revenue threshold or by buying, selling or sharing the personal data of many consumers. The section lists categories collected, the rights to know, delete, correct and opt out, and a sale or sharing statement. Other US states have similar laws, so the section mentions them too.

Where are my answers stored?

Only in this browser. The generator saves one draft in local storage so the questionnaire is still filled in when you return, and nothing is sent to a server. Another device or browser will not see the draft. Use Clear all answers to delete it, and keep a copy of the final documents yourself, for example by downloading the HTML or Markdown.

About you

Personal data you collect

Services you use

Cookies

Visitors and privacy laws

Terms of use