Book a 20-minute call

Free tool

Privacy notice generator

Build a draft client privacy notice around what UK data protection law expects, ready to adapt. It runs in your browser; nothing you type is stored, sent, or seen by anyone else.

Private by design. Everything you enter stays in your browser. Nothing you type here is sent to us, saved anywhere, or seen by anyone else. Close the tab and it's gone.

Example output: coming soon

Who you are
This is my practice location.
Registration and people
Suggestions update to match the body you choose. Use the exact wording of your own status.
Enter your own detail here, do not publish the example text.
Paste your own register entry URL if you have one; otherwise it links to the register search page.
Use full provider names, e.g. "Google Workspace, Zoom, Acuity Scheduling". List the ones you actually use. Enter your own detail here, do not publish the example text.
How long you keep records
Include the unit, e.g. '7 years'. Seven years is a common default, allowing for the time limits on complaints and claims. Unsure what to put? The default is a sensible standard, you can keep it.
HMRC asks the self-employed to keep records for at least 5 years after the 31 January deadline for that tax year (GOV.UK). 6 years covers that; check with your accountant.
Unsure what to put? The default is a sensible standard, you can keep it.
Unsure what to put? The default is a sensible standard, you can keep it.
Optional section Optional. Tick this only if the practice is a registered limited company. The notice then names the company as the data controller, with you as director and data protection contact.
Enter your own detail here, do not publish the example text.
Enter your own detail here, do not publish the example text.
Enter your own detail here, do not publish the example text.
Optional section Optional. Tick if other services refer clients to you.
Optional section Optional. Tick if an employer or EAP arranges some of your clients.
Optional section Optional. Tick if insurers such as Bupa or Aviva pay for some sessions. Adds the insurer as a recipient, with explicit consent for progress reports.
Optional section Optional. Adds how joint records and access requests work.
Optional section Optional. Adds how young people and their parents or carers can use data rights. Check it against your professional body and insurer guidance.
Optional section Optional. Tick if you have a professional executor (clinical will).
Enter the full name, or leave blank.
Optional section Optional. Tick if you send marketing such as a newsletter.
Optional section Optional. Tick if you have a website or take enquiries online. This adds a website and cookies section.
Enter your own detail here, do not publish the example text. Leave blank to leave the website section out.
Check this is your actual host, e.g. WordPress, Squarespace, Wix, Vercel. A wrong host name is a factual error on a compliance page.
Pick the one that matches your site. The opt-out option is allowed since February 2026 for analytics only, and only if visitors can easily turn it off. Choose the banner option if you have a real consent banner that blocks non-essential cookies until accepted; any advertising tag needs it.
e.g. Plausible, Fathom, Vercel Web Analytics. Naming it is clearer for visitors.
Optional section Optional. Google does not allow remarketing or audience lists for counselling ads, so this section rules them out. Do not put a Meta (Facebook) pixel on a counselling website: it can tell Meta that a named visitor is looking for mental-health help. Publish this section only once the ads are running.
Conversion tracking needs the consent banner option under "Analytics and cookies".

Your draft, live

Collecting client details too? Our client intake form template is built on the same data-minimisation principles as this notice.

This is a template to adapt, not legal advice. Please have important wording reviewed by a suitably qualified person before you rely on it.

← All free tools