Published policies
Privacy policy, US and Europe
In the libraryThe door has this paper. Type its name at the composer. It offers to start from it.
The same public page, written for a product with users on both sides of the Atlantic — the version to publish when some of the people reading it are in Europe. Alongside what is collected and why, it names the basis relied on for each use, says where data goes, and sets out the requests a reader can make and how to make them.
- Printed on the page as
- Privacy Policy (Global)
- Where it can live
- Any of the 184 governing laws
Who uses one
- Companies with users, customers or staff in Europe or the United Kingdom.
- Businesses whose site is reached from outside their home country.
- Anyone asked by a customer to show a privacy notice that names a lawful basis.
What you are deciding
- What information is collected, and how
- What each use is for, and what basis is relied on
- Who else it is shared with
- Whether it leaves the country, and on what route
- How long it is kept
- What requests a reader can make, and how they are handled
- Who to contact, and where a complaint goes
- How the notice changes and how readers are told
Blanks you leave stay blank and wait in the room. Nothing is filled in from a guess.
The sections a draft usually has
- 1Who we are and how to contact us
- 2What we collect
- 3What we use it for and on what basis
- 4Who we share it with
- 5International transfers
- 6Retention
- 7Your rights
- 8Cookies and tracking
- 9Complaints
- 10Changes to this notice
A general outline, not a required one. What turns up in a draft follows what you described. A contract is written in the order a contract is read.
What people call it
Type any of these at the door. It offers this paper. The matching happens in your own browser, on a wordlist you could read. No model runs before you sign in.
- global privacy policy
- gdpr privacy policy
- eu privacy policy
- international privacy policy
Questions people ask
- Do these rules apply to a company outside Europe?
- They can, where a service is offered to people in the region or their behaviour is monitored. Whether a particular business is caught is a question for a lawyer rather than a page like this.
- What is a lawful basis?
- In several frameworks each use of personal data has to rest on a named ground — consent and contractual necessity among them. Notices of this kind list the uses and the ground relied on for each.
- Can one policy cover every country?
- Many organisations publish one notice with regional sections, because the underlying facts are the same and only the rights and routes differ.
General answers about the document. Not advice about your situation. Not written about any one country.
Where it lives
A contract names the legal system it is governed by. That is a separate decision from which paper it is. You pick it at the door, from any of the 184 units in Governing law, including England and Wales, Delaware, California and New York.
Say what you agreed in one sentence. When what you describe is privacy policy, us and europe, the door offers this paper. One press takes it. One press refuses it.
Start it at the door →Related kinds