DRAFT ONLY — DO NOT PUBLISH UNTIL LEGALLY AND FACTUALLY REVIEWED. This is a checklist-based starting point, not a completed privacy notice or legal advice.
Website operator
Operator name: [LEGAL BUSINESS NAME]
Contact email: [PRIVACY EMAIL]
Contact address (if required): [BUSINESS ADDRESS]
Information collected
Describe the actual data collected through contact forms, newsletter signup, analytics, comments, embedded media, security logs and any purchases or service inquiries. Do not state that your site collects or avoids particular categories without checking the installed plugins and hosting configuration.
Why and how data is used
Explain the purpose and applicable legal basis, if relevant, for each data category. Explain who receives data, such as hosting, newsletter, analytics and payment service providers.
Cookies and external services
Identify actual cookies and tracking scripts. Explain how visitors can manage consent where required by law. List embedded content and any international transfers as applicable.
Retention, rights and security
Explain retention periods, access and correction rights, deletion requests, security practices, children’s data, and how to contact the operator with a privacy concern.
Updates
Effective date: [DATE AFTER LEGAL REVIEW]
Have a qualified adviser review this draft for your actual jurisdiction, data practices and relevant regulations before publication.