Do you need a privacy notice?
UK General Data Protection Regulation (UK GDPR), Articles 13 & 14
When this applies
A privacy notice is likely required on your website. It must explain what personal data you collect, why, how long you keep it, and people's rights over it.
Even without a website, you likely need a privacy notice if you collect personal data offline. It should be provided at the point of collection, e.g. on a form or by email.
When it does not apply
A privacy notice is likely not required if you do not collect personal data.
What is at stake
Fines up to £17.5M or 4% of global turnover under UK GDPR
What to do
Publish a privacy notice on your website and provide it to anyone whose data you collect. Templates available via the ICO.
Check all 27 regulations for your business
This is one of 27 checks getsorted runs. Answer around 12 questions and see your full compliance picture in three minutes. Free, no account.
Check your business →Reviewed: 2026-06-25 · Source: official guidance