Free Tool
Privacy Policy Template Builder
Create a GDPR-compliant privacy policy for your website in 2 minutes. Country-specific templates for Netherlands, Belgium, UK, Ireland, and the Nordics.
This privacy policy template is provided as a starting point for basic compliance. It is not legal advice. We recommend having your privacy policy reviewed by a legal professional.
About your business
Enter your website so we can pre-fill some answers about third-party services.
How it works
Tell us about your business
Enter your business name, country, and website. We can auto-detect third-party services.
Select what your site does
Check what visitors can do: contact forms, newsletter, payments. No technical knowledge needed.
Get your privacy policy
Review your generated policy, copy it, or have us email you the ready-to-upload HTML file.
What your privacy policy includes
Who you are
Business name, country, contact details, and registration number.
What data you collect and why
Specific sections for contact forms, newsletters, accounts, bookings, and payments — with legal basis for each.
Cookies and tracking
Cookie types, consent requirements, and how visitors can manage preferences.
Third-party services
Each service you use, what data it processes, and a link to their privacy policy.
Data retention periods
How long you keep each type of data, with reasonable defaults for each category.
Visitor rights under GDPR
Access, rectification, erasure, portability, objection — with the correct supervisory authority for your country.
International data transfers
If any service transfers data outside the EEA, with the correct legal framework referenced.
Country-specific templates
Each generated policy references the correct supervisory authority, cookie legislation, and registration requirements for your country.
Netherlands
Autoriteit Persoonsgegevens
KvK number, Telecommunicatiewet
Belgium
Gegevensbeschermingsautoriteit (GBA)
KBO number, Belgian Electronic Communications Act
United Kingdom
ICO
UK GDPR (post-Brexit), PECR
Ireland
Data Protection Commission
S.I. 336/2011
Denmark
Datatilsynet
Cookie Order
Sweden
IMY
LEK
Norway
Datatilsynet
Ekomloven
Finland
Data Protection Ombudsman
Electronic Communications Act
Frequently asked questions
Do I need a privacy policy for my website?
Yes. Under the GDPR, any website that collects personal data (including through contact forms, analytics, or cookies) must have a privacy policy that explains what data is collected, why, and how it is processed. This applies to all businesses operating in or targeting users in the EU and UK.
Is this privacy policy legally binding?
This tool generates a privacy policy template as a starting point for compliance. It is not legal advice. While the template covers common requirements for simple SMB websites, we recommend having it reviewed by a legal professional, especially if you process sensitive data, serve minors, or operate in multiple jurisdictions.
Can I use a privacy policy generator for GDPR compliance?
A privacy policy generator can help you create a solid starting point that covers the key requirements under the GDPR (Articles 13 and 14). However, GDPR compliance requires more than just a privacy policy — you also need proper cookie consent, data processing agreements, and internal procedures. This template covers the privacy policy part.
What should a Dutch privacy policy include?
A Dutch privacy policy (privacyverklaring) must include: your identity and contact details, what personal data you collect and why, the legal basis for processing, data retention periods, who you share data with, data subject rights under the AVG (Dutch GDPR), and how to file a complaint with the Autoriteit Persoonsgegevens. Our template covers all of these for Dutch businesses.
A privacy policy is just the start
Our full scan checks 73 compliance points across cookies, GDPR, accessibility, security, image licensing, and more.
Run Full Compliance Scan →When you need professional help
This template is designed for simple SMB websites with basic data collection. If any of the following apply to your business, we strongly recommend consulting a privacy lawyer:
- •You process sensitive data (health, biometric, racial, political, religious data)
- •Your website or service is aimed at children under 16
- •You process employee data through your website
- •You operate in multiple EU/EEA jurisdictions
- •You engage in large-scale profiling or automated decision-making