Answer a few questions and get a ready-to-use privacy policy and terms of service — required by Google, Apple and the law. Copy or download, no sign-up.
Templates for general guidance, not legal advice. Review before publishing.
Fewer than most template sites suggest, but the ones you do need are not optional.
A generated policy is a good starting point for a straightforward UK business: a website, a contact form, an email list, standard analytics, payments through a mainstream processor. The requirements in that situation are well settled, and a generator covers them properly.
Get proper advice if you handle health data, data about children, biometric or criminal-offence data, if you transfer personal data outside the UK at any scale, or if you are regulated. The cost of getting those wrong is not comparable to a solicitor’s fee.
The most common failure is not a badly written policy — it is a policy that stopped being true. Every tool you add that touches visitor data changes what your policy should say. Review it whenever the site changes, and date it.
Your policy must identify the actual data controller. For a limited company that is the company name, its registered number and registered office. For a sole trader it is your own name and an address where documents can be served. A policy that says only “we” identifies nobody and is worth very little.
Link every policy from the footer of every page. Link the privacy policy again directly at each point of collection — beside the submit button on a form, and inside the cookie banner. Documents nobody can find do not discharge a duty to inform.
A privacy policy if you collect any personal data, a cookie policy and banner if you set non-essential cookies, terms and conditions if you take payment, and a disclaimer if you publish advice.
For a straightforward UK business they cover the standard requirements well. Get proper advice if you handle health data, children's data, or transfer data outside the UK at scale.
The actual data controller — a company's registered name, number and office, or a sole trader's own name and an address for service. “We” alone identifies nobody.
Whenever you add anything to your site that touches visitor data. A policy that no longer describes what you do is evidence of a problem rather than protection.