Policy templates
Each template is a reasonable starting point — not legal advice. Fill in your details, copy the text into your own document, and have qualified counsel review it before you publish or rely on it.
Privacy Notice (data subjects)
Public notice for users / customers explaining what you collect, why, and their rights.
Data Retention Schedule
Internal table mapping each data category to a retention period and disposal method.
Data Subject Rights Procedure
Internal SOP for receiving, validating, and responding to access / erasure / objection requests.
Record of Processing Activities (ROPA)
Internal register of every processing activity, who is responsible, and what safeguards apply.
Personal Data Breach Response Procedure
Step-by-step plan for the first 72 hours after a suspected breach, including notification triggers.