LEGAL / TEMPLATE NOTICE
Privacy notice template.
This page is a drafting structure only and must be reviewed by qualified counsel before publication.
DOCUMENT STATUS
Template copy. Legal review required.
Replace every bracketed field, verify actual data flows, and obtain qualified legal review before launch. This page is not legal advice.
OWNER / [LEGAL ENTITY]
EFFECTIVE / [DATE]
CONTACT / [PRIVACY EMAIL]
DO NOT PUBLISH WITH PLACEHOLDERS
01 / SCOPE + CONTROLLER
Define who controls the data and where this notice applies.
State the legal entity responsible for the site, the products and regions covered, and any separate notices that override this one. Replace [LEGAL ENTITY], [ADDRESS], and [REGIONS] with verified information.
02 / DATA CATEGORIES
Inventory what the site actually collects.
Document contact details, account information, submitted content, device and usage data, support records, and any integrations. Remove categories you do not collect and add any category introduced by your real stack.
03 / PURPOSE + LEGAL BASIS
Connect each use to a documented reason.
Explain how data supports service delivery, security, support, product improvement, communications, and legal obligations. Map every purpose to the lawful basis applicable in your operating regions; do not copy a basis that your counsel has not validated.
04 / VENDORS + TRANSFERS
Name the real recipient categories and transfer safeguards.
Describe service providers, professional advisers, authorities, corporate transactions, and customer-directed integrations. Add the actual locations and safeguards used for cross-border transfers. Link a verified vendor list if one exists.
05 / RETENTION + SECURITY
Publish criteria you can operate and evidence.
State retention periods or decision criteria for each material data category. Describe safeguards at a level your security and legal teams approve. Avoid absolute promises, certification claims, or guarantees that are not supported by current evidence.
06 / RIGHTS + CHOICES
Explain how people can make a request.
List rights available by region, verification steps, authorized-agent handling, appeal routes, and response channels. Replace [PRIVACY EMAIL] and [REQUEST PORTAL] with monitored destinations before launch.
07 / COOKIES + AGE BOUNDARY
Match consent language to the technology in use.
Describe cookies, similar technologies, preference controls, and age restrictions only after auditing the deployed site. Do not claim that the service is directed away from children unless that product and legal boundary is real and enforced.
08 / CHANGES + CONTACT
Maintain the notice as the product changes.
Set an owner and review cadence, explain how material updates are communicated, and provide a monitored privacy contact. Replace [POSTAL ADDRESS], [PRIVACY EMAIL], and [SUPERVISORY AUTHORITY] with accurate details.