Free tool · BuildMeA Projects
A privacy policy your website legally needs
If your site collects a name, an email or an enquiry, UK GDPR says you need a privacy notice — and if it uses cookies or analytics, a cookie policy too. Answer a few plain questions and generate both, written in clear English and aligned with the ICO's own structure. Nothing you type leaves your browser.
Tell us about your business
Everything here stays in your browser — nothing is uploaded, saved or sent anywhere. The generated policies appear below for free; you only leave a detail if you want to print or save them.
Privacy & Cookie Policy
Who this is for
Tradespeople, salons, studios, shops and any small UK business with a website that collects a name, an email, a phone number or an enquiry message. Under UK GDPR you are the data controller for that information, which means you're legally required to tell people what you collect, why, and what their rights are — that's what a privacy notice does. If your site also uses Google Analytics, a Facebook pixel or any non-essential cookies, PECR (the Privacy and Electronic Communications Regulations) means you need a cookie policy and a consent banner too. This tool builds both, following the ICO's own recommended structure, so you have a solid, plain-English starting point. Everything you type stays in your browser — nothing is uploaded or stored.
Once you've generated your policy, it needs a home: a page on your website (usually linked in the footer as "Privacy Policy") that people can read before they hand over their details. If you don't yet have a site — or yours has no privacy or cookie page — that's exactly the kind of thing we sort out for UK trades and local businesses.
Frequently asked questions
Do I legally need a privacy policy for a small business website?
Yes. If your website collects any personal data — even just a name and email through a contact form — UK GDPR requires you to give people a privacy notice explaining what you collect, your lawful basis for using it, how long you keep it, who you share it with, and their rights. It applies to sole traders and limited companies alike; there's no "too small to bother" exemption. The Information Commissioner's Office (ICO) is the UK regulator, and a clear, honest privacy notice is the baseline they expect.
What's the difference between a privacy policy and a cookie policy?
A privacy policy covers all the personal data you handle — names, emails, enquiries, payments — under UK GDPR. A cookie policy specifically covers the small files your site stores on a visitor's device (analytics, advertising pixels, chat widgets and so on) and is governed by PECR. Most sites need both, plus a cookie consent banner that lets people accept or reject non-essential cookies before those cookies load. This tool generates the privacy policy and the cookie policy; your website still needs a working consent banner wired up separately.
Is this generated policy legally watertight?
It's a solid, standard starting point built on the ICO's recommended structure and conventional UK privacy-notice wording — not bespoke legal advice. Every business handles data slightly differently, so you are responsible for reading it through and making sure it accurately describes what you actually do. If you process anything sensitive (health, children's data, large-scale profiling) or you're unsure, have it reviewed by a solicitor or a data-protection specialist before you publish it. Think of this as getting you 90% of the way there for free.
Where do I put the policy once I've generated it?
It needs to live on your website — normally as its own page linked from the footer of every page (labelled "Privacy Policy" and "Cookie Policy"), and linked next to any form so people can read it before they submit. Copy the text into your site's page editor, or hand it to whoever manages your website. If you don't have a website, or it has no way to add these pages, we build sites for UK trades and local businesses with the privacy, cookie and consent set-up handled properly from the start.
Please note: this tool gives a guide or estimate only. It may not be 100% accurate and is not professional advice — always check the figures before you rely on them. Any document this tool produces is a template for convenience, not legal advice. You are responsible for making sure anything you issue meets your own legal obligations; seek professional advice for your situation. This generator produces a template starting point based on the ICO's standard privacy-notice structure — it is not legal advice and is not guaranteed to cover your exact situation. Your business is the data controller and is responsible for making sure the finished policy accurately reflects how you handle personal data; have it reviewed by a professional for anything sensitive or high-risk. UK data protection law changes over time — the Data (Use and Access) Act 2025 has already amended parts of the UK GDPR and PECR cookie rules — so check current ICO guidance before publishing, especially if you rely on analytics or marketing cookies. Everything you type stays in your browser and is never uploaded.
Almost there
Where should we send your policy?
Your privacy policy and cookie policy are free to read and copy on screen. Pop your details in and you can print or save them right away — we build websites & lead systems for UK trades, and getting the privacy/cookie set-up right is part of that, so this is how we say hello.
Success
You're all set!
Check your inbox — and your spam or junk folder, just in case.
Built by BuildMeA
Need something built around your business?
This tool is free to use. We build websites, lead systems and bespoke tools for UK trades & local businesses — if you want the phone ringing more often, that's the bit we're good at.