Privacy Policy Generator
Generate a starting-point Privacy Policy template for your website or app from your answers; have a qualified lawyer review it before you publish.
Did this tool work for you?
How to use this calculator
- 1
Enter your company name and website URL.
- 2
Add your privacy contact email address.
- 3
List the types of data you collect from users.
- 4
Set your governing country and effective date.
- 5
Copy or download the generated Privacy Policy and publish it on your website.
Frequently asked questions
How is the “Data You Collect” list turned into text?
The field is split at commas, each item is trimmed, empty items are dropped, and each one becomes a bullet under section 1, “We collect the following types of personal information”. “name, email address,, payment details , ” produces three bullets. If the box is empty or contains only commas and spaces, the default list of name, email address and usage data is used.
Can I say why each type of data is collected?
Not in this template. Section 2 is a fixed list of seven purposes, from providing the service to complying with legal obligations, and it is the same whatever you enter. If a particular item has its own purpose, add that sentence yourself.
Does the document change for different countries?
Only one line does: section 10 says the policy is governed by the laws of the country you type. The rights list, the retention wording and the children’s section are identical for every country, and no law or regulator is named anywhere in the text.
What does the sharing section promise?
Section 3 says the company does not sell, trade or otherwise transfer personal information except with consent, to service providers described as bound by confidentiality agreements, when required by law, or in a business sale or merger. These are factual statements about your practices, so edit them if your site shares data differently, for example with ad networks.
What does it say about retention and rights?
Retention is one sentence: data is kept as long as necessary for the stated purposes unless the law requires or permits longer, with no specific period. Section 6 lists six rights (access, rectification, erasure, restriction, portability and objection) and points requests to your email address. It states no response time, no identity checks and no appeal route.
How are cookies treated?
Section 4 is a single paragraph about cookies and similar technologies, and it says visitors can configure their browser. It does not name any provider. For a category-by-category description, use the Cookie Policy Generator and link the two pages.
How are blank fields and special characters handled?
Empty company, URL, email, country or date fields print as [Company Name], [Website URL], [Contact Email], [Country] and [Effective Date]. Entries are inserted as plain text without escaping, so characters such as & and quotation marks appear as typed.
Which age does the children’s section use?
It is fixed at under 13: the site is “not directed to children under the age of 13” and does not knowingly collect their data. If your audience or rules call for a different age, change the sentence manually.
Privacy policy template: one editable list, ten fixed sections
What you control and what is fixed
The only content you shape is the comma-separated data list, which becomes the bullets under section 1. Company, URL, email, country and date fill in names, contact lines and the governing-law sentence. Everything else is boilerplate that does not change with your answers. The table maps each section to its source so you know which parts you must review rather than simply accept.
| Section | Source | Worth checking |
|---|---|---|
| 1. Information we collect | Your data list | Does it match your forms and analytics? |
| 2. How we use it | Fixed, seven purposes | Remove any purpose you do not have |
| 3. Sharing | Fixed, “do not sell, trade…” | Accurate for your ad and analytics partners? |
| 4. Cookies | Fixed, one paragraph | Link to a fuller cookie policy |
| 5. Retention | Fixed, no stated period | Add periods if you have them |
| 6. Your rights | Fixed, six rights, email contact | Can you honour each request? |
| 7 to 9. Children, links, changes | Fixed, under 13 | Does the age fit your audience? |
| 10. Governing law | Your country entry | Only a single sentence |
| 11. Contact | Your email and URL | Is the mailbox monitored? |
Worked examples
Entering “name, email address,, payment details , ” for Orchard Labs prints three bullets (name, email address, payment details), with the stray comma and spaces discarded. A box containing only “ , ” falls back to name, email address and usage data. With the country set to Ireland, section 10 reads “This Privacy Policy is governed by the laws of Ireland.” and section 7 sends children’s queries to the email address you entered, for example privacy@orchard.example.
Statements you need to make true
Several lines describe your behaviour rather than the law. The sharing section says you do not sell, trade or transfer personal information apart from four listed cases and that service providers are bound by confidentiality agreements. The use section says promotional messages go out only where the person has opted in. Section 6 lists six rights “depending on your location” but promises no deadline or process. Review each line against your real practice and rewrite whatever does not fit.
Topics the template does not include
There is no section on the legal basis for processing, transfers of data to other countries, named processors, automated decisions, sensitive categories of data, security incidents or opt-out links. Some privacy regimes ask for items such as these; whether any applies to you is a question for a lawyer. The text also never names a specific privacy law, so it does not tell visitors which regime protects them.
A template, not legal advice
The finished document is a starting template, not legal advice. Privacy rules differ widely by country and by state, and a policy page alone does not decide whether your data practices are allowed. A qualified lawyer should review it, together with how your site actually collects and stores data, before you rely on it.
Learn more from an authoritative source:
InvestopediaReturn Policy Generator
Generate a free Return and Refund Policy for your online store or eCommerce website.
Cookie Policy Generator
Generate a starting-point Cookie Policy template for your website from your answers; have a qualified lawyer review it and match it to your consent setup.
Disclaimer Generator
Generate a website disclaimer template covering content, advice and information, based on your answers; have a qualified lawyer review it.
NDA Generator
Generate a free Non-Disclosure Agreement (NDA) for business meetings, partnerships, or employee onboarding.
DMCA Notice Generator
Generate a DMCA takedown notice draft to report copyright infringement and request removal of the content; review it before sending.
Website Disclaimer Generator
Generate a professional website disclaimer covering liability, accuracy, external links, and professional advice.
Results are estimates for informational purposes only and do not constitute professional financial, medical, legal, or technical advice. Read full disclaimer →