Privacy Policy

Privacy Policy: Create a Verified Privacy Notice

A verified privacy policy (or privacy notice) explains how your business collects and uses personal data. It sets out what data you collect, why, your legal basis, who you share it with, how long you keep it, how you protect it and the rights people have. Robot Lawyer drafts the policy from your answers, for the data protection law of the country or state you choose. A qualified legal professional checks it within 24 hours before you publish.

CONTENTS

What Is a Privacy Policy?

Data protection laws require businesses to tell people, clearly and openly, how their personal data is used. A privacy policy is how you do that. A good one builds trust with customers and shows regulators you take data protection seriously.

When Do You Need One?

• Websites and apps
  Collecting names, emails, payment details or analytics data.
• Online shops and services
  Handling customer orders, accounts and marketing.
• Any business handling personal data
  Customers, suppliers, enquiries and mailing lists.

What's Included in Your Policy?

• Who you are
  Your business details, how to contact you about privacy, and a "last updated" date.
• What data you collect
  The types of personal data and where it comes from.
• Why and on what basis
  The purposes you use it for and your lawful basis.
• Sharing and transfers
  Who you share it with, and any transfers to other countries.
• Retention and security
  How long you keep it and how you protect it.
• People's rights
  Access, correction, erasure, objection and complaints.
• Optional form
  A personal data request form people can use to exercise their rights, if you want one.

How It Works on Robot Lawyer

1. Answer the questions
   Tell us about your business, the data you collect and how you use it.
2. Generate your policy
   We draft a complete, clear privacy policy.
3. Get it verified
   On the Verified plan, a qualified legal professional checks the policy within 24 hours and makes amendments where needed. The Essentials plan does not include this check. See how our documents are verified.
4. Publish it
   Link it in your website footer and wherever you collect data.

How It Works in Different Countries

• UK
  Privacy notices must meet the UK GDPR and the Data Protection Act 2018, and people can complain to the Information Commissioner's Office. Most businesses that handle personal data must also pay a data protection fee.
• EU and Ireland
  The GDPR sets detailed rules on what a privacy notice must say. In Ireland, the Data Protection Commission is the regulator.
• United States
  There is no single federal privacy law, but California and a growing number of other states require businesses to publish a privacy policy and explain people's rights, and children's data has its own rules.
• Canada and Australia
  National privacy laws apply to many businesses, and some provinces or businesses have extra rules.

These notes are general, so check the rules wherever you collect data. Use a Cookies Policy alongside your privacy policy if your website uses cookies.

Privacy Policy FAQs

Is a privacy policy a legal requirement?

If you collect personal data, you must give people the required privacy information, and a privacy policy is the usual way to do it.

Do I need a data protection officer?

Only some organisations must appoint one, such as public authorities and businesses that carry out large-scale monitoring or process sensitive data on a large scale. Your policy includes contact details either way.

How often should I update my privacy policy?

Whenever you change how you use personal data, and at least once a year as a check.

Can I use this policy outside the UK?

Yes. Your policy is drafted under the law of the country or state you choose. Our lawyers are qualified in England and Wales and, on the Verified plan, check documents for good practice, clear formatting and the law of England and Wales. They are not qualified in other countries' law, so if your policy is governed by another country's law, we recommend having a local lawyer check it too.

Create a Verified Privacy Policy

Be clear and open about personal data. You can start with a 7-day free trial. See our pricing for the plans. Related documents: Cookies Policy, Terms of Service, Data Protection Policy and Data Processing Agreement.