Introduction to this document

GDPR - privacy notice

Under data protection legislation certain information must be supplied to individuals regarding the processing of their personal data. All this information can be put in a privacy notice.

thought process

When putting your privacy notice together, go through the following thought process:

  • what information is being collected?
  • who is collecting it?
  • how is it collected?
  • why is it being collected?
  • how will it be used?
  • who will it be shared with?
  • what will be the effect of this on the individuals concerned?
  • is the intended use likely to cause individuals to object or complain?
  • how can they complain and to whom?


Starting point

The starting point of your privacy notice should be to tell people:

  • who you are
  • what you are going to do with their information; and
  • who it will be shared with.