What Is a Privacy Policy?

A privacy policy is a legal document on your website that informs users about how you collect and handle their personal data, who you share it with, if you sell it, what rights they have over it, and any other relevant details.

You might also call a privacy policy a:

  • Privacy Agreement
  • Privacy Clause
  • Privacy Notice
  • Privacy Page
  • Privacy Policy Statement

Some specific platforms or services may require a unique privacy policy template, for example:

However, a standard privacy policy template will likely satisfy user demands and legal requirements for your website.

Example of a Standard Website Privacy Policy

A simple privacy policy outlines the following information:

  1. What information is collected
    • A simple privacy policy outlines the following information:
    • A simple privacy policy outlines the following information:
    • A simple privacy policy outlines the following information:
      • A simple privacy policy outlines the following information:
      • A simple privacy policy outlines the following information:
      • A simple privacy policy outlines the following information:
  2. Where the information is collected from
  3. Why the information is collected
  4. How the information is collected
  5. Who the information is shared with or sold to
  6. What rights users have over their data and how to act on them
  7. The site’s contact details

If you use a template, remember that your final privacy policy should also be clear to read, thorough, and easy for internet users to find.

Why You Need a Privacy Policy

Businesses need a privacy policy to comply with data privacy laws, to meet third party service requirements, and to build trust with consumers.

Privacy Policies are Required by Law

Privacy laws exist around the globe, and your website or app must abide by the legislation depending on factors like where you’re located, where your customers come from, and how much data you track.

Some of the laws that dictate if and when you legally need a privacy policy page for your website or app include:

  • General Data Protection Regulation (GDPR): The GDPR regulates privacy policy requirements for entities targeting users in the European Union (EU) and the European Economic Area (EEA), and it applies to websites regardless of the company’s physical location. It requires a generic privacy policy that meets several specific requirements.
  • California Consumer Privacy Act (CCPA): The CCPA regulates privacy policy requirements for businesses targeting users in California, regardless of the company’s physical location. It requires you to outline your data practices, which you can do with a standard privacy policy template.
  • California Online Privacy Protection Act (CalOPPA): The CalOPPA was adopted in 2004 and was one of the first data privacy regulations implemented in the U.S., setting the standard for the presentation, wording, and implementation of privacy policies.
  • All Current U.S. State-Level Privacy Laws: Currently, more than 16 states have passed consumer data privacy laws in the U.S. and all of them require covered businesses to have a compliant privacy policy available for consumers.
  • Personal Information Protection and Electronic Documents Act (PIPEDA): PIPEDA covers ten fair information privacy practices companies must follow to do business in Canada and applies to all businesses, not just those operating online. Organizations must transparently inform the public about data handling practices, and a privacy policy can help meet these requirements.
  • Children’s Online Privacy Protection Act (COPPA): COPPA is a federal U.S. law that applies to any business marketing to children and requires a comprehensive privacy policy posted on your website or app.
  • Gramm-Leach-Bliley Act (GLBA): The GLBA requires websites that are “significantly engaged” in financial activities to publish a “clear, conspicuous and accurate statements” regarding information collection and sharing practices.

Penalties for violating these laws include significant fines, criminal penalties, and damage to brand reputations.

Fortunately, our legal team keeps our comprehensive privacy policy template up to date to help you meet the guidelines of new and evolving data privacy laws.