UK GDPR Privacy Policy Generator
Answer a few simple questions and get a free, UK GDPR-compliant privacy policy ready to use on your website. No signup required — everything runs in your browser.
Disclaimer: This is a template — consult a legal professional for advice specific to your situation.
UK GDPR Privacy Policy Requirements
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, every organisation that collects or processes personal data about individuals in the United Kingdom must have a privacy policy. This is not optional — it is a legal requirement enforced by the Information Commissioner's Office (ICO).
What Must a UK Privacy Policy Include?
The ICO requires your privacy policy to clearly explain: who you are (the data controller) and how to contact you; what personal data you collect and why; the lawful basis for processing under Article 6 of the UK GDPR; who you share data with; how long you keep data; whether data is transferred outside the UK; and what rights individuals have regarding their data.
What Are Your Rights Under UK GDPR?
UK GDPR gives individuals several important rights: the right to be informed about how their data is used, the right of access (subject access requests), the right to rectification, the right to erasure (right to be forgotten), the right to restrict processing, the right to data portability, and the right to object to processing. Your privacy policy must inform visitors about these rights.
What Happens if I Don't Have a Privacy Policy?
Failure to comply with UK GDPR can result in enforcement action by the ICO, including fines of up to £17.5 million or 4% of annual global turnover (whichever is higher) for the most serious infringements. Even for small businesses, the ICO can issue enforcement notices, reprimands, and smaller fines.
About This Generator
This free privacy policy generator creates a comprehensive template based on your answers. All processing happens entirely in your browser — your data is never sent to any server. There is no tracking, no cookies, and no signup required. While this tool provides a strong starting point, we always recommend having a qualified legal professional review your policy.