When processing personal data, you must tell people what you are doing with it. They have the right to know why you need it, what you’ll do with it and who you’re going to share it with. You should provide this information in a clear, open and honest way.
It’s best to have this written down in a document called a privacy notice. We have developed a template you can use to help build your own privacy notice, including recommended wording, tips and links to relevant guidance. The template is especially suitable for small businesses, sole traders and community groups.
You can read more about your obligations in this area in our guidance on the right to be informed in our Guide to the UK GDPR.