Privacy Policy Generator
To help ensure GDPR compliance, our Privacy Policy Generator asks a few simple questions about how you’ll use the data collected through your forms. Based on your answers, we’ll generate a tailored privacy policy, which is included directly in your form, no legal jargon, just what’s required.
What is a Data Controller?
The Data Controller is the individual, in your company/organisation, that determines why and how personal data is collected and used. If you’re creating the web form, you are likely the Data Controller. Your name and contact email must be included in the privacy policy so users know who is responsible for their data.
Opt-out Feature
Contacting submissions for anything other than the purpose of the form.
Under UK GDPR, an opt-out is only required if you are sending marketing or promotional emails. If you’re only using a user’s email address to provide a service they requested (for example, to confirm a booking, respond to an enquiry, or a service request), you are not required to offer an opt-out, as this falls under the lawful basis of contract.
If you plan to send any marketing communications, you must:
- Provide an opt-out option, such as:
- An unsubscribe link or instructions in emails, or
- Instructions allowing users to contact you directly to opt-out.
Please choose the method you offer for opting out, if required.
Are you requesting file uploads?
If your form includes a file upload field, you must inform users how the uploaded data will be used (e.g. for the purpose of processing their enquiry or other stated reason), who will store the files, and how the data will be protected.
- Free Plan: If you upload files through our web forms, please note that we do not provide secure file storage under our free plan. It is your responsibility, as the data controller, to store any uploaded files in accordance with applicable data protection laws, including the UK GDPR. By using this feature, you confirm that you have appropriate measures in place for secure data handling.
- Paid Plan, If you upload files through our web forms, these files are stored securely by us in accordance with UK GDPR requirements. We implement appropriate technical and organisational measures to safeguard uploaded content, including encryption and access controls.
What purpose will the collected data be used for?
This question helps you define why you’re collecting personal data through your form. Under GDPR, you must clearly state each specific purpose, such as responding to enquiries, recruitment, verifying identity, sending marketing emails, etc. Be clear and transparent, and only collect data that’s necessary for those purposes.
