What is a privacy notice under GDPR?

A privacy notice is the document that tells people what personal data you collect, why you collect it, on what legal basis, who you share it with, how long you keep it and how they can exercise their rights. It is required by GDPR Articles 13 and 14 whenever you collect personal data directly from someone or obtain it from another source.

Do I need one if I already have a cookie banner?

Yes. A cookie banner handles consent for cookies only. A privacy notice covers all personal data processing: contact forms, newsletters, customer records, analytics identities, invoices. Most websites need both.

Can I publish the generated text as-is?

The generator produces a complete draft based on your answers. Review it so it matches what your organisation actually does — an accurate notice matters more than a long one. The output is a template, not legal advice.

Does anything I enter leave my browser?

No. The generator runs entirely client-side. Nothing is sent to any server, nothing is stored, there are no cookies. You copy or download the finished notice yourself.

FREE TOOL

Privacy Notice Generator

Answer the questions → get a clean GDPR Article 13/14 privacy notice ready to publish on your website. No signup, nothing leaves your browser.

1. Who you are Organisation name Contact for privacy questions Data protection officer / representative (if any)

2. What you do with data What do you use personal data for? (tick all that apply)

Contact form / enquiries
Newsletter / e-mail marketing
Client work & invoicing
Website analytics
Recruitment
Accounting records

Other purposes

3. Sharing, transfers and retention Who receives the data? (one per line: name — service)

Leave empty if nobody outside your organisation receives it.

Transfers outside the EU/EEA? Countries / providers involved How long do you keep data?

4. Your rights & complaints Supervisory authority for complaints

Visitors always have the right to complain to their local authority; this names the most likely one.

Date of last update

Why you need a privacy notice

It is legally required. GDPR Articles 13 and 14 oblige every organisation that processes personal data to tell people about it, at or before collection. Missing or misleading information is one of the most common findings in supervisory-authority inspections.
Clients ask for it. Enterprise customers doing vendor assessments routinely request a link to your privacy policy before signing. Having one ready removes friction from sales.
It keeps you honest. Writing down what you actually do with data — and checking it once a year — is half of practical GDPR compliance.

Prefer to adapt a file yourself? Download the free privacy policy template instead.

The notice says what you do with data. It cannot tell you whether anyone finds it.

This generator is free, and it writes the whole document: who you are, what you collect and on what basis, who you share it with, transfers outside the EU, retention, rights and complaints. Nothing is held back for a licence.

What a document cannot do is tell you whether it is even linked from your site. EUComply Pro opens your live URL and answers that: two of its 18 server-side checks are exactly this — whether a privacy or cookie link exists at all, and whether a consent banner is missing on a page that really does load a tracker. The free scanner already runs the 15 accessibility checks, so with those 18 it is 33 checks in all, and the report comes as a PDF you can send to a client. $79/year per website.

Generated privacy notice

Why you need a privacy notice

The notice says what you do with data. It cannot tell you whether anyone finds it.