The ICO exists to empower you through information.

Purpose and lawful basis for processing

You can use our privacy notice generator tool to create a bespoke privacy notice for your organisation. Your generated privacy notice will allow you to tell people how you’ll use their information. 

The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator.

What we need

We’ll need you to provide the contact information that will be added to your privacy notice. Adding this to your privacy notice allows people to contact your organisation about their data protection rights. You can choose what to include. For example, your address, telephone number or email address.

What we do with it

This tool uses the information you provide to create a bespoke privacy notice for your organisation, which you can download or copy and paste. Any personal information you provide will be added to the privacy notice that is created..

The ICO won’t use this information and will only access it if you ask us to.

How long we keep it

The information you input will be retained until midnight on the day you submit it.

What are your rights?

For more information on your rights, please see 'Your data protection rights'.

Do we use any data processors?

We use Shout Digital Ltd to support the operation of our website, which includes this tool. We use a third-party web application firewall from Cloudflare to help maintain the security and performance of our website. We host our website in Microsoft Azure in the UK. Please see Visitors to our website for further information.