Privacy Notice
How {{business_name}} collects, uses, shares, retains, and protects personal information across its website, services, communications, and business operations.
Effective date: {{effective_date}}
This notice explains our general privacy practices. Use the summary first, then review the sections that apply to you. Replace every placeholder and remove any statement that does not accurately describe your organization.
At a glance
{{business_name}} is responsible for the personal information described in this notice. We collect only the information we identify, use it for the purposes explained below, share it with the recipients we name, and retain it according to {{retention_schedule}}. Privacy contact: {{privacy_email}}. This summary does not replace the details below.
Who we are and when this notice applies
This notice applies to personal information handled by {{business_name}}, located at {{business_address}}, when people visit our websites, contact us, use our services, create an account, attend an event, apply to work with us, or otherwise interact with our business. Our privacy lead is {{privacy_officer}}. It does not automatically cover employee information, third-party websites, or processing governed by a separate notice. Confirm the organizations, services, and jurisdictions in scope: {{jurisdictions}}.
Information we collect and where it comes from
We may collect the following verified categories of personal information: {{data_categories}}. Sources may include information you provide directly; information generated when you use our website or services; information from devices, cookies, or similar technologies; and information received from approved partners or public sources. Our actual sources are: {{collection_sources}}. Describe categories precisely enough that a person can understand them, identify sensitive information separately, and remove categories or sources that do not apply.
Why we use personal information
We use personal information only for documented purposes such as providing requested products or services, managing accounts and transactions, responding to inquiries, maintaining security, meeting legal obligations, improving experiences with appropriately limited analytics, and sending marketing where permitted. Our verified purpose-to-data and, where required, lawful-basis mapping is: {{purposes_and_legal_bases}}. Optional uses must be presented as a genuine separate choice. Do not rely on this sample to select a lawful basis.
Cookies, analytics, advertising, and automated decisions
Describe each relevant cookie, analytics, advertising, profiling, or automated decision practice here: {{tracking_and_automated_processing}}. Explain whether each technology is necessary or optional, the information involved, its purpose, providers, duration, choices, and any meaningful consequences. Link to a separate cookie notice or preference centre where appropriate. If no solely automated decision produces legal or similarly significant effects, say so only after confirming that fact.
When we share, sell, or disclose information
We may disclose personal information to service providers that support hosting, storage, payments, communications, customer management, analytics, scheduling, security, professional advice, or other documented operations. Our recipients or recipient categories are: {{service_providers}}. We may also disclose information when required by law, to protect rights or safety, or in a permitted business transaction. State accurately whether personal information is sold, shared for cross-context behavioural advertising, or disclosed for targeted advertising: {{sale_sharing_statement}}. Where applicable, provide the required opt-out or limitation method.
International processing
Personal information may be processed outside the place where it was collected. Identify the countries or regions, recipients, and applicable safeguards here: {{transfer_safeguards}}. Information processed in another jurisdiction may be subject to its laws. Do not claim that a transfer mechanism or adequacy decision applies until it has been verified for the organization, recipient, data, and destination.
Retention and security
We keep each category of personal information only for the period reasonably necessary for its stated purpose and applicable legal, accounting, dispute, and security requirements. Our category-level periods or decision criteria and deletion or de-identification process are: {{retention_schedule}}. We use administrative, technical, and physical safeguards appropriate to the sensitivity and risks of the information. Our verified safeguards summary is: {{security_summary}}. No transmission or storage method is completely secure.
Your privacy choices and rights
Depending on where you live and why we process information, you may have rights to receive information, access or obtain a copy, correct, delete, restrict or object to processing, withdraw consent, obtain portability, limit certain uses of sensitive information, opt out of sale, sharing, targeted advertising, or certain profiling, and complain to a regulator. Rights are not absolute and vary by jurisdiction. Submit a request through {{privacy_request_method}} or contact {{privacy_email}}. We may take proportionate steps to verify identity and authority. Applicable response timing, appeal process, authorized-agent process, and regulator details: {{rights_and_regulator_details}}.
Children and sensitive information
Our intended audience and minimum age are: {{minimum_age_and_audience}}. If children may use the service or if we knowingly collect information from them, replace this section with a verified child-privacy process, including age thresholds, notices, consent, rights, and deletion procedures. Identify any sensitive information and the additional consent, access, retention, security, or limitation measures that apply: {{sensitive_information_practices}}.
Changes, questions, and complaints
We may update this notice when our practices or legal obligations change. We will revise the effective date and provide additional notice or obtain consent where required before a materially different use begins. Questions, requests, or complaints may be sent to {{privacy_officer}} at {{privacy_email}} or {{business_address}}. Applicable supervisory authority or regulator: {{rights_and_regulator_details}}. This template is general educational sample content, not legal advice; verify it against actual data practices and applicable law before publishing.
