FREE TOOL · NO SIGN-UP · EDITABLE DRAFT
Free UK privacy policy generator
Prepare an editable first draft from your actual data-handling arrangements. Unknown facts stay visibly unresolved.
The generator processes answers in this page’s memory. It has no save, email, analytics or server-submission feature. Leaving or refreshing clears the answers. The surrounding WordPress page still has its normal hosting and consent controls.
This tool cannot choose your lawful basis, confirm a transfer mechanism, inspect your website or establish compliance. Use confirmed information, complete unresolved prompts and obtain appropriate review before publication.
Step 1 of 5 — Controller
Activity
How should you use a privacy policy generator?
Use it to organise verified information about each purpose for which your organisation handles personal data. The output is an editable first draft. A generator cannot establish your lawful basis, decide a retention period or confirm a transfer arrangement from a website address.
Worked example: handling enquiries
Fictional input: Example Company adds the activity “Responding to enquiries”, describes the purpose and information used, and leaves the lawful basis and retention details unconfirmed.
What the draft does: it carries the company’s entered facts into the notice and leaves visible [CONFIRM ...] prompts for unresolved details. The review step lists missing information. It does not silently choose a lawful basis or invent a storage period.
This example illustrates the tool. It does not establish the right basis, retention or wording for a real organisation. Complete the prompts and arrange appropriate review before publishing your notice.
Should enquiries and marketing be separate activities?
Record distinct purposes separately when the details differ. Check each activity’s data, recipients, basis, retention and transfers. Do not assume that a person sending an enquiry has agreed to unrelated marketing.
What if I cannot confirm a recipient or retention period?
Keep it unresolved in the working draft and ask the person responsible for that process or supplier relationship. Complete the factual data map and the notice before using the draft as your published privacy information.
Scope and further guidance
The UK GDPR transparency requirements depend on the data, source and processing activity. Current ICO guidance also notes that some material is under review following legislative changes. This generator is a structured drafting aid. Complex or sensitive processing needs specialist review.
Drafting tool · 25 October 2026. Generated notices need factual and appropriate specialist review. Cookie policy draft tool · Homepage signal checker
How CookieBanner handles personal information · Questions about this tool: john@cookiebanner.co.uk