A website privacy notice only has to cover what happens on the website, but it has to be right about it. This one prompts you to check the cookie wording against your own site before you publish, so the notice never describes a control you do not have.
This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Policy number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested policy templates. No junk, jargon or unnecessary content. Simple and usable policy templates
developed over 25 years through practical use in the real world.
Further guidance on data protection and websites:
Download this policy template with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This policy is also included in the GDPR / Data Protection Toolkit, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like hands-on help preparing the privacy notices for your website and the rest of your business, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Website Privacy Policy Template
A website privacy policy template for the notice that sits on your website. It explains what personal data the site collects - enquiry details, newsletter sign-ups and technical information such as IP address and cookies - why it is used, who else sees it, how long it is kept and what rights visitors have.
It is written to be published as it stands once completed, with yellow editing prompts marking every point that has to match your own site: the details you collect, the cookies set, whether an AI chatbot is used, and the retention periods.
What the Website Privacy Policy Covers
- Personal information we collect - contact and form details, sign-ups and technical information about visits
- Why we use it - each purpose matched to its lawful basis, including consent for analytics and advertising cookies
- Cookies - necessary cookies, and analytics and advertising cookies set only with permission
- Third parties and AI - hosting, analytics and other providers, and a website AI chatbot where one is used
- How long we keep it - retention for enquiries and chatbot conversation logs
- Your rights and Complaints
Who Needs a Website Privacy Policy?
Any organisation with a website that has a contact form, sets cookies or uses analytics. It suits organisations that want a notice focused on website visitors, kept separate from the main privacy notice given to customers and employees.
Included in the GDPR / Data Protection Toolkit
This policy is part of the GDPR / Data Protection Toolkit - the registers, forms, policies, procedure and guidance for documenting how you collect and process personal data, in one download.
Works with the Privacy Policy
The P-26 Privacy Policy is the main privacy notice for the people whose data you hold. This website notice covers visitors to the site, and both draw on the same personal data register.
Using the Policy
Add your company name, address, web address and contact details to the table at the top, then work down the yellow prompts. Delete anything the site does not collect, add anything it does, and set the retention periods. Check the cookie wording against the site itself before publishing.
Common Website Additions
- An online shop or customer account
- A booking or appointment form
- A job application form
- Embedded maps, videos or fonts from third parties
- A live chat or AI chatbot
Each of these collects personal data or passes it to a third party, so each needs a line in the notice.
Checking the Cookie Statement
The notice says analytics and advertising cookies are only set with permission. That is only true if the site has a working cookie banner that holds those cookies back until a choice is made - check this on the live site before publishing.
Related Documents
Other documents in the GDPR / Data Protection Toolkit that work alongside this one:
Would you rather we prepared it for you?
Our Personal Data Register and Privacy Notice Preparation service works through the personal data your organisation holds with you, including the AI tools in use, and prepares the register and privacy notice so they describe what actually happens to that data.
Personal Data Register and Privacy Notice Preparation