Tell users how you handle their personal data. Answer a few plain-English questions and Scorpia drafts the complete document for your situation, checks it with a second review pass, and shows you a free preview before you pay anything.
Draft my privacy policy — free preview →WEBSITE PRIVACY POLICY
__________ — Last Updated: __________
__________ is committed to protecting your privacy and handling your personal data with transparency, integrity and respect. This Privacy Policy explains what personal data we collect, how we use it, your rights in relation to it, and how to contact us. Please read this policy carefully before using __________ (the "Site").
1. WHO WE ARE
__________ is the data controller responsible for your personal data. We are incorporated in England and Wales under company number __________, with our registered office at __________. You may contact our data controller at: Email: __________ | Telephone: __________.
We are registered with the Information Commissioner's Office ("ICO") and comply with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
2. PERSONAL DATA WE COLLECT
(2.1) We may collect and process the following categories of personal data:
(a) Identity Data: your name, username or similar identifier.
(b) Contact Data: your email address, telephone number and postal address.
(c) Technical Data: your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology identifiers on the devices you use to access the Site.
(d) Usage Data: information about how you use our Site, products and services.
(e) Communications Data: your preferences in receiving communications from us, and correspondence you send to us.
(2.2) We do not knowingly collect or process special category data (such as data concerning health, race, religious beliefs or sexual orientation) unless expressly required for a specific service and you have given your explicit consent.
A privacy notice tells the people whose data you collect what you do with it. It is required by UK GDPR (as amended by the Data (Use and Access) Act 2025) for virtually every business website, app or mailing list, and the ICO can take action where it is missing or inaccurate.
Articles 13 and 14 of UK GDPR set the list: who you are and how to contact you; a data protection officer if you have one; what data you collect; the purposes and the lawful basis for each (contract, legal obligation, legitimate interests with those interests named, or consent); who receives it, including processors such as your email provider and analytics; international transfers and the safeguards used; how long you keep it or the criteria for deciding; the individual's rights (access, rectification, erasure, restriction, portability, objection, and rights about automated decisions); the right to withdraw consent; the right to complain to the ICO; and whether providing data is a legal or contractual requirement.
Email marketing to individuals needs consent, or the soft opt-in under PECR regulation 22 for existing customers about similar products, with an opt-out in every message. Non-essential cookies, including analytics, need consent before they are set; the cookie policy lists each category, provider, purpose and duration and explains how to withdraw consent. Scorpia generates the cookie policy as a companion document.
Most organisations processing personal data must pay the ICO data protection fee; the notice can state your registration. If your service is used by children under 13, consent must come from a parent and the Age Appropriate Design Code applies.
Yes, whenever you collect personal data, which includes a contact form or newsletter sign-up.
Most businesses that process personal data must pay the data protection fee (from £52 a year); a few exemptions apply. The ICO's self-assessment tool confirms it.
The privacy notice covers all personal data you hold; the cookie policy covers what your website stores on the visitor's device and the consent for it. You need both.
For business-to-business email, often yes with an opt-out; for individuals, consent or the soft opt-in is needed. The questions ask what you do and the notice is drafted to match.
Whenever your processing changes. Keep a dated version; the draft includes a 'last updated' line.
No. Scorpia is software that drafts and checks documents. It is not a law firm and does not give legal advice. For a dispute, a company sale or anything unusual, use a solicitor.