How to Generate a Privacy Policy for Your Website

A privacy policy page is legally required and will also help your website stay compliant with privacy laws like GDPR, CCPA, and ePrivacy Directive. This guide will walk you through how you can generate a custom privacy policy for your website in minutes.

To begin with, sign up on CookieYes and try it for free.

1. Log in to your CookieYes account.
2. From the top navigation bar, select Legal Policies.
3. From the Privacy Policy section, click + Generate.

• Select the primary language
• Choose the primary language for your privacy policy.
• Generate policy in multiple languages
• Select the additional languages you want to generate the privacy policy in. This feature is available only on Basic, Pro and Ultimate plans.
• Click Save draft to save your progress or Next to continue.

Company details has two sections: Contact information and Business details.

In Contact information, provide name (either company or individual), website URL, email address, contact URL (if applicable), and full address. Click Next to navigate to Business details.

In Business details, provide the following details.

Do you have users in EU/EEA?

Select Yes or No to indicate whether your website has users in the EU or EEA. Selecting Yes includes GDPR-specific clauses in your privacy policy.

Do you have users in California?

Select Yes or No to indicate whether your website has users in California. Selecting Yes displays follow-up questions that determine whether the CCPA/CalOPPA applies to your business.

If you select No, no additional questions appear.

If you select Yes, answer the following questions:

• Are you a for-profit organisation?
• If you select No, no additional questions appear, as the CCPA applies only to for-profit businesses.
• If you select Yes, the following question appears:
• Do you cross one or more of the following thresholds? $25 million or more in annual gross revenue, data processing for 100,000 or more customers, or 50% or more of revenue from selling customers' personal information (including data shared for cross-context behavioral advertising).
• If Yes, the CCPA applies to your business. A Disclosure of data page appears later in the flow.
• If you select No, a follow-up question appears: Do you want to include CCPA-compliant clauses even if not legally required?
• If you select Yes, the Disclosure of data page is added to the flow.
• If you select No, no additional questions appear in this step.
• Do you sell or share the personal information of users?
• Selecting Yes prompts you to provide the categories of personal information that are sold or shared and, for each category, the categories of third parties to which the information is sold or shared. The Disclosure of data page is also added to the flow.
• If you select No, no further questions appear in this step.

Click Next to proceed to Step 4.

Collection of data has two sections: Personal information and Additional information.

In Personal information, specify the types of personal or sensitive personal information you collect. Click Next to navigate to the Additional information section.

In Additional information, provide the following details:

• Specify whether you use cookies or other tracking technologies. If you select Yes, add a link to your cookie policy.
• Describe how you respond to Do Not Track requests.
• Specify whether you collect information about users below the age of 16.
• Select the legal bases for collecting the data.
• Specify whether you collect information about users below the age of 13.
• Specify whether you have a process that allows users to review and request changes to their information. If you select Yes, describe how users can review or update their data.

Click Next to proceed to Step 5.

In Use of data, select the options that describe how the information you collect is used. Click Next to proceed to Step 6.

In Disclosure of data, provide details about the categories of users whose information is sold or shared, the request process for users to delete, correct, or access their information, sensitive information disclosures, and any third-party disclosures made in the past 12 months.

In Data retention, specify how long the information you collect is retained. Click Next to continue.

In Miscellaneous disclosures, provide details about cross-border data transfers (to non-adequate countries or regions outside the EU), automated data processing, your data protection officer's contact details, and your data controller or representative (if applicable). Click Next to continue.

You can now preview your privacy policy in multiple languages. Click Generate privacy policy to generate the policy.

Click Add policy to site to see the methods for adding the privacy policy to your website.

After clicking Add policy to site, a modal window will appear prompting you to choose a method to embed the policy.

You have two options:

Automatically keeps your privacy policy updated whenever changes are made in the CookieYes platform.

Steps:

1. Choose the preferred language.
2. Click Copy code to copy the JavaScript snippet provided.
3. Paste the code into the required section of your website’s HTML.

Use this option if you prefer to manually update the website every time you modify the cookie policy.

Steps:

1. Select the language.
2. Click Copy code to copy the generated HTML code.
3. Paste it into the desired location on your site.

Return to CookieYes and click Complete generation. In the popup that opens, click Yes, I have installed.

Your privacy policy page will be live on your website. You can then link your privacy policy to your website footer.

• If you are facing issues with the Privacy Policy Generator, contact technical support.
• To help meet privacy law requirements, you can also add a free cookie banner on your website and obtain cookie consent for deploying cookies on your website visitor’s devices.
• To update your privacy policy after publishing, see How to Edit a Privacy Policy.

You've successfully generated and published your privacy policy and added it to your website. With these steps, your visitors can clearly understand how their personal information is collected and used, and you can meet important privacy compliance requirements such as the GDPR, CCPA, and other data protection laws.

By embedding the privacy policy directly into your website using either the Code snippet method or the HTML format method, you ensure it is easily accessible and kept up to date. This not only strengthens legal compliance but also builds user trust by providing transparency about your data practices.