Sample Privacy Policy

You may use this sample as a starting point for your website’s privacy policy, covering how your business collects, uses, and shares personal information and the choices available to visitors.

Overview

The sample below provides a general starting point for businesses creating a privacy policy for their website. It describes common information collection, use, and disclosure practices, along with privacy choices and other general provisions.

Untitled provides this template as a reference for informational purposes only. It is not legal advice and does not guarantee compliance with applicable laws. We strongly encourage each client to review the policy with qualified legal counsel and tailor it to accurately reflect its website, data practices, and applicable regulatory requirements.

Before publishing, replace the business-specific placeholders (contained in brackets: [] ) and confirm that the policy accurately describes your practices.

Remove statements that do not apply and add any disclosures required for your business. Your website controls and internal processes should support the choices and commitments described in the policy.

---

Sample Privacy Policy

Last updated: [Date]

[Business name] respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit [Website URL], use our products or services, or otherwise interact with us. It also explains your choices regarding your information.

In this policy, we, us, and our refer to [Business name]. Personal information means information that identifies, relates to, or can reasonably be linked to an individual or household, as defined by applicable law.

1. Information We Collect

Information you provide

We collect information you provide when you submit a form, make a purchase, create an account, subscribe to communications, participate in a survey or promotion, or contact us. Depending on how you interact with us, this may include your name, email address, telephone number, mailing address, billing and shipping information, account details, company information, preferences, and the content of your communications.

We also collect information you choose to submit through our website, such as reviews, comments, feedback, and other content. If you provide information about another person, you should have the authority to provide it for the intended purpose.

You may choose not to provide certain information, although this may limit our ability to fulfill a request, complete a transaction, or provide particular features or services.

Information collected automatically

When you visit our website, we and our service providers may automatically collect information about your browser, device, and use of the website. This may include your IP address, browser type, operating system, device identifiers, cookie identifiers, referring website, pages viewed, links clicked, and the dates and times of your visits. We may also derive an approximate location from your IP address.

We may collect information about your interactions with our emails and advertisements, such as whether you opened a message or clicked a link. This information helps us understand engagement and improve our communications.

Information from other sources

We may receive information from business partners, referral sources, marketing and analytics providers, social media platforms, and publicly available sources. This may include contact information, professional information, demographic information, interests, and information about your interactions with those sources.

If you connect a third-party account or use a third-party sign-in feature, we may receive information that the service makes available based on your permissions and account settings.

We may combine information from these sources with information we collect directly to maintain accurate records, understand our customers, and support the purposes described in this policy.

Transaction information

When you make a purchase, we collect information needed to process the transaction, fulfill your order, and provide related support. This may include order details, billing and shipping information, payment information, and transaction history. Payment providers may process payment information on our behalf. Their own privacy notices may also apply to information they collect directly.

2. How We Use Information

We use personal information to:

• Provide, operate, and improve our website, products, and services.

• Process payments, fulfill orders, and manage returns, billing, and related requests.

• Create and administer accounts and remember your preferences.

• Respond to inquiries, provide customer support, and communicate about your relationship with us.

• Send order confirmations, account notifications, service updates, and other administrative messages.

• Personalize content, recommendations, and offers.

• Send marketing communications and promote our products and services, subject to applicable requirements and your preferences.

• Understand website usage, develop audiences, and measure advertising and marketing performance.

• Administer surveys, promotions, and events.

• Detect and prevent fraud, unauthorized activity, and other misuse.

• Maintain business records, comply with legal obligations, enforce agreements, and establish, exercise, or defend legal claims.

We may also use information for purposes described at the time of collection or with your consent where required by law.

3. Cookies, Analytics, and Advertising

We use cookies, pixels, tags, local storage, and similar technologies to operate our website, remember preferences, understand visitor activity, and support advertising. Cookies are small files stored on your device. Pixels and similar technologies can help record actions such as viewing a page or opening an email.

Some technologies support essential functions, such as security, account access, and shopping carts. Others help us analyze website performance, personalize your experience, and measure or deliver advertising.

We may work with analytics and advertising providers that collect information through these technologies. Advertising providers may use information about activity over time and across websites or services to display ads that are relevant to your interests. We may also provide contact information or other identifiers to support audience matching and campaign measurement. Encoded or hashed identifiers may still be associated with you and are not necessarily anonymous.

You can manage optional technologies through [Cookie Settings URL]. You can also adjust your browser settings to block or delete cookies and other stored information. Disabling certain technologies may affect website functionality. We obtain consent where required by applicable law.

Cookie controls do not necessarily delete information already collected. Additional privacy choices are described below.

4. Website Visitor Identification

We use the Untitled Identity Tag to help associate website activity, such as IP addresses, cookie identifiers, browser information, and pages visited, with an existing identity record. This may allow us to obtain contact information and related attributes even if you have not submitted a form on our website. We may use this information for visitor analysis, marketing, advertising, audience development, and campaign measurement, subject to applicable consent requirements and your choices. We obtain the appropriate consent before activating the tag.

You can manage website preferences through [Cookie Settings URL] or contact us using the information below. For information about this provider’s practices and requests concerning information it controls, see Untitled’s Privacy Policy and Consumer Privacy Request form.

5. How We Disclose Information

We may disclose personal information in the following circumstances:

Service providers. We share information with companies that help us operate our business, including hosting providers, payment processors, fulfillment providers, customer support services, analytics providers, marketing platforms, advertising platforms and communications platforms. These providers process information to perform services for us, subject to applicable contractual and legal requirements.

Advertising and marketing partners. We may disclose contact information, online identifiers, website activity, transaction or conversion information, and audience information to advertising and marketing partners to support relevant advertising, audience matching, and measurement, subject to applicable requirements and your choices.

Affiliates and business partners. We may share information with affiliated businesses and partners when necessary to administer our operations, provide jointly offered products or services, or fulfill your requests.

At your direction. We may disclose information when you request or authorize it, such as when you connect another service or participate in a jointly offered program.

Legal and protective purposes. We may disclose information to comply with applicable law or valid legal process, obtain professional advice, enforce our agreements, prevent fraud, or protect the rights, property, or safety of our business, customers, or others.

Business transactions. Information may be disclosed or transferred in connection with a proposed or completed merger, acquisition, reorganization, financing, sale of assets, or similar transaction, subject to applicable legal requirements.

Sale, sharing, and targeted advertising

[State whether your business sells personal information, shares it for cross-context behavioral advertising, or processes it for targeted advertising under applicable law. Identify the actual information and recipient categories involved, and provide the applicable opt-out link. This statement must reflect your business’s practices.]

6. Your Choices and Privacy Rights

Marketing communications

You can unsubscribe from marketing emails by following the unsubscribe instructions in the message or contacting us. We may continue to send transaction confirmations, security notices, and other necessary service communications.

You may contact us to request that we stop sending promotional postal mail. If you participate in a text messaging program, follow the opt-out instructions provided in the messages or applicable program terms.

Marketing unsubscribe requests, cookie preferences, and advertising opt-outs address different activities. Contact us if you need help managing your preferences.

Account information

If you have an account, you may be able to review and update certain information through your account settings. You may also contact us to request correction or deletion of account information. We may retain information where necessary for legal obligations, fraud prevention, dispute resolution, or other permitted purposes.

Privacy requests

Depending on your location and applicable law, you may have the right to:

• Confirm whether we process your personal information and request access to it.

• Correct inaccurate personal information.

• Request deletion of personal information, subject to applicable exceptions.

• Obtain a portable copy of personal information.

• Opt out of the sale or sharing of personal information, targeted advertising, or certain types of profiling.

• Limit certain uses or disclosures of sensitive personal information.

• Withdraw consent where processing is based on consent.

• Appeal a decision concerning a privacy request.

You can submit a request using [Privacy Request URL] or by contacting us at [Privacy email address]. We may need to verify your identity or authority before fulfilling certain requests, where permitted or required by law. We do not require identity verification for opt-out requests where prohibited by law.

Where applicable, you may authorize an agent to submit a request on your behalf. We may request appropriate evidence of that authorization and additional verification where permitted. We will respond within the time required by applicable law. We will not unlawfully discriminate against you for exercising your privacy rights.

7. Information Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining business records, complying with legal obligations, resolving disputes, and honoring privacy preferences.

Retention periods vary based on the type of information, the nature of our relationship with you, and applicable requirements. We consider whether the information remains necessary, whether we have an ongoing legal or business need to retain it, and the potential risks associated with retaining it.

[Insert your business’s actual retention periods or meaningful criteria by information category, including any category-specific disclosures required by applicable law.]

8. Information Security

We endeavor to protect the privacy of your account and other Personal Information we hold in our records, but we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you create an account, keep your login credentials confidential and notify us if you suspect unauthorized access or use.

9. Children’s Privacy

Our website and services are not directed to children under [Applicable age]. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action, including deletion where required by law.

10. Public Content and Third-Party Services

Content you choose to post in public areas of our website, such as reviews or comments, may be visible to other people. Please consider what personal information you include in publicly available content.

Our website may link to other websites or provide access to third-party services, features, or integrations. Those third parties have their own privacy practices, which are described in their privacy notices. This policy describes our own practices, including the information collection and disclosures we enable through our website.

11. International Processing

We and our service providers may process information in countries other than where you live. Those countries may have different privacy laws. Where applicable law requires protections for international transfers, we implement the required safeguards.

[Identify the actual processing locations and applicable transfer safeguards if your business processes information internationally. Remove this section if it does not apply.]

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. We will post the updated policy and revise the date above. We will provide additional notice or obtain consent when required by law. You are bound by any changes to the Privacy Policy when you use the Website after such changes have been first posted.

13. Contact Us

If you have questions about this Privacy Policy or would like to exercise an applicable privacy right, contact us:

[Business name] [Mailing address] [Privacy email address] [Privacy Request URL] [Telephone number]

You may also contact us to request this policy in an accessible alternative format.

---

Additional Coverage to Consider

The following notes are for the business preparing its policy and are separate from the sample policy above.

Depending on your business, additional disclosures may be needed for:

• State privacy laws: State-specific categories, sources, purposes, recipients, sale and sharing disclosures, retention, rights, and request procedures. A separate notice at collection may also be required.

• Sensitive information: Health, financial, biometric, precise location, or other sensitive information collected or inferred by your business.

• Loyalty programs and incentives: Programs offering discounts or benefits connected to the collection or use of personal information.

• Automated decisions: Profiling or automated decisions that trigger specific notice or consumer rights requirements.

• Website interaction tools: Chat, session replay, call recording, or similar technologies that capture the content of interactions.

• Children and teenagers: Services used by minors that require additional notices, consent, or other protections. Untitled Personal Data does not include information regarding individuals under the age of 18. Our identity resolution and data services are not intended to identify, enrich, license, or provide personal information concerning minors.

• International or industry-specific obligations: Additional requirements arising from where your customers are located or the products and services you offer. Untitled data, the identity graph and its identity resolution services are designed for U.S. records and U.S.-based audiences exclusively.