Legal guide

Privacy Policy: what it is and how to write it

Everything you need to know about the privacy policy: what it’s for, what the law requires and how to create it correctly for your website or business.

Generate my privacy policy free →

What is a privacy policy and why is it mandatory?

The privacy policy is the document that informs users about the processing of their personal data. It is mandatory whenever your website collects data (a contact form, a newsletter, comments or an online store). It is required by the GDPR (Regulation (EU) 2016/679), in its articles 13 and 14, and by the LOPDGDD (Spanish Data Protection Act, Organic Law 3/2018).

What must it include?

Data controller: who collects the data and how to contact them.
Purpose: what the data is used for.
Legal basis: the lawful basis for the processing (consent, contract, legitimate interest…).
Retention: how long the data is kept.
Recipients: to whom the data is transferred or disclosed.
Rights: access, rectification, erasure, objection, restriction and portability, and the right to lodge a complaint with the AEPD (Spanish Data Protection Agency).

This generator covers all of those sections. Remember to link the privacy policy on every form on your website, alongside a consent checkbox.

Create your privacy policy in 2 minutes. Answer a few questions and download the document as Word, PDF or copy it. Free and no sign-up.

Open the generator →

Frequently asked questions

FAQ about the privacy policy

Do I need a privacy policy if I only have a contact form?

Yes. As soon as you collect a name or an email you are already processing personal data and must provide notice through the privacy policy and a consent clause in the form.

Where should I publish it?

On a page accessible from the footer of your website and linked from every form that collects data.

Is it valid for an online store?

Yes, but you will also need terms of sale. You can generate those here too.

⚠️ Important notice — please read. This generator provides free guidance templates based on current regulations (GDPR, LOPDGDD, LSSI-CE and consumer law). They do not constitute legal advice and do not guarantee legal compliance for your specific case.

Each owner is solely responsible for reviewing, adapting and verifying that the texts match their actual activity and applicable law, as well as for effectively complying with their legal obligations. For complex cases, consult a legal professional.

DominaInternet (Jordi Espies Garcia), owner of this tool, assumes no liability for the use of the generated texts or for any consequences arising from their use.