Privacy notice (UK GDPR) – free template (UK)

If you collect personal data, even only through a contact form, you must tell people who you are, why you use their data, on what lawful basis, how long you keep it and what rights they have. Most organisations that process personal data must also pay the ICO data protection fee unless exempt.

Legal basis: UK GDPR, Articles 13 and 14; Data Protection Act 2018; Privacy and Electronic Communications Regulations 2003 (cookies) · Legal position: October 2026

🇺🇸 US🇮🇪 Ireland

Free, no sign-up, nothing uploaded. Help in 11 languages, the document stays in English.

Fill in the template →

Example (filled with sample data)

Privacy notice

This notice explains how Sharma Design Ltd ("we") uses personal information collected through www.sharmadesign.co.uk and in the course of our business.

Who we are

Sharma Design Ltd, 22 Park Row, Leeds LS1 5JF. Email: [email protected]. We are the controller of your personal information.

What we use and why

PurposeInformationLawful basis
Answering your enquiriesName, contact details, your messageLegitimate interests (Art. 6(1)(f)) or steps before a contract (Art. 6(1)(b))
Orders, delivery, invoicingName, address, contact and payment details, order historyContract (Art. 6(1)(b)); keeping accounting records (Art. 6(1)(c))
Running our website securelyIP address, technical logsLegitimate interests (Art. 6(1)(f))

Who we share it with

Our web host and email provider, payment and delivery providers, and our accountant. They act on our instructions. We do not sell your personal information. If information is transferred outside the UK, we use the safeguards the law requires.

How long we keep it

Enquiries: as long as needed to answer them, normally no longer than 12 months. Order and accounting records: 6 years from the end of the financial year, as required for tax purposes.

Your rights

You can ask for access to your information, correction, erasure, restriction, data portability, and you can object to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time. Contact us at [email protected]; we will reply within one month.

Complaints

You can complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113. We would appreciate the chance to deal with your concerns first.

Last updated: 31 October 2026

Created with Pflichtblatt (pflichtblatt.com). General guidance under the law of England and Wales, legal position as of October 2026. Not legal advice. Please check that it is up to date and fits your situation.

This is what the finished document looks like. Replace the sample data with your own in the form.

Questions

Is this template really free?

Yes. Pflichtblatt is free, has no ads, no sign-up and no tracking. Everything you type stays in your browser; the PDF is created on your device.

What does “Privacy notice (UK GDPR)” mean?

Tell people what personal data you collect, why, on what legal basis, who receives it, how long you keep it and what rights they have. Most businesses that handle personal data must also pay the data protection fee to the ICO.

Free, no sign-up, nothing uploaded. Help in 11 languages, the document stays in English.

Fill in the template →

More templates for UK

All templates 🇬🇧 UK →