A standard customer-facing website privacy policy that complies with the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR) and the Data Protection Act 2018 (DPA 2018). An online business may use this policy to notify the website visitors about how it collects, uses, and stores personal data (excluding special categories of personal data and data relating to criminal convictions and offenses) through the use of its website and to provide goods and services.

Note: this resource is affected by recent developments relating to international transfers of personal data. Pending a full update of the resource, please see this summary of the relevant developments.