Privacy Policy Template for UK Businesses
A privacy policy is a legal requirement for any UK business that collects personal data — including via a website, booking form, or customer records. Get one tailored to your specific business in minutes.
Instant PDF & Word download · 14-day money-back guarantee
What is a privacy policy?
A privacy policy (also called a privacy notice) is a document that tells individuals how your business collects, uses, stores, and shares their personal data. Under the UK GDPR and Data Protection Act 2018, you must provide this information to anyone whose data you hold.
If you have a website with a contact form, take bookings, collect customer emails, or keep records of any kind, you need a privacy policy. The ICO can issue fines of up to £17.5 million or 4% of global turnover for serious breaches.
What your UK privacy policy must cover
- Your identity and contact details as the data controller
- What personal data you collect and how
- The legal basis for processing (consent, contract, legitimate interests, etc.)
- How long you retain data
- Whether you share data with third parties
- Data subject rights (access, erasure, portability, objection)
- The right to complain to the ICO
- Whether data is transferred outside the UK