This Privacy and Cookies Statement template sets out what personal data you collect on your website, how you use that data and details of any cookies stored locally on a visitor's device. It helps you comply with your legal obligations under the General Data Protection Regulation (superseding the Data Protection Act 1998) and the e-Privacy Directive (the 'Cookie Law').
If you collect personal data from or about visitors to your website then you are required by law to publish an accessible and easy-to-understand statement on your website that sets out:
- what personal data you collect
- how you use it
- why you collect it
- who you share it with
- the legal basis for processing the data you collect
- details of any automated decision-making
- individuals' rights regarding their personal data.
This template provides a framework for providing the above and can be easily adapted and extended to suit your website. Sample clauses have been provided to show typical information a straightforward ecommerce website may need to include. We encourage you to carry out a data and cookie 'audit' prior to drafting your privacy statement to help you create a complete and accurate privacy statement.
You must register with the Information Commissioner's Office (ICO) if you collect personal data. It's important to regularly review and update your Privacy and Cookie Statement so that it accurately reflects what data you collect, how and why you use it. Similarly, your declaration to the ICO should be regularly reviewed to ensure it is up-to-date with how your business operates.
This Privacy and Cookies Statement is suitable for use with websites based in England, Scotland and Wales and includes clauses covering:
- who you are
- how to contact you
- what personal data you collect, why you collect it and how you use it
- informing data subject of their statutory rights
- third part links
This template was updated February 2018. It has been re-drafted to make it easier to understand and new sections added to assist in complying with GDPR requirements.