Overview 

We understand that creating content for your new website can be a time-consuming and challenging process. One critical element of your site is a Privacy Policy, which can often be confusing to draft, especially if you're unsure of the information you need to include. To help simplify this process, we’ve gone ahead and created a comprehensive Privacy Policy template that you can use as a starting point for your website. This template covers the essential aspects of privacy protection for users and will help ensure your website is compliant with data protection laws.

Why You Need a Privacy Policy 

A Privacy Policy is required for most websites that collect personal data from users, and it serves to inform your visitors about how their data will be used, stored, and protected. Not having a Privacy Policy in place can expose you to legal risks, especially with the growing emphasis on privacy laws worldwide.

Updates Needed Prior to Use

Please carefully review the sample privacy policy, as it includes sections that may or may not apply to your business. Each section should be reviewed thoroughly, with any portions that are not applicable removed prior to use.

• Blue highlights indicate sections that should be removed if they do not apply.

• Yellow highlights indicate text that should be updated to reflect your specific business details.

Disclaimer
This Privacy Policy template is provided for informational purposes only and does not constitute legal advice. We are not attorneys, and this document should not be considered a substitute for professional legal counsel. You are solely responsible for ensuring that your Privacy Policy complies with applicable laws and regulations. We strongly recommend that you consult with your own legal advisor for all policies, documents, and agreements.

Sample Privacy Policy

Last Updated: September 23, 2025

Introduction 

[Company Name] (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, use the APP NAME Mobile App, or interact with us in any other way. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

If you reside in the European Union, United Kingdom, or California, please also review the Addendum below regarding your specific privacy rights.

Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the site includes:

1. Personal Data (ORDERS ONLY): Personally identifiable information, such as your name, address, email address, and telephone number, which is collected when you place orders or participate in related site activities.
2. Personal Data (ORDERS + ACCOUNT): Personally identifiable information, such as your name, address, email address, and telephone number, and demographic information, such as your age, and interests, that you voluntarily give to us when you register with the site or when you choose to participate in various activities related to the site.
3. Derivative Data: Information our servers automatically collect when you access the site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the site.
4. Financial Data: Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the site.
5. Mobile Device Data: Device information, such as your mobile device ID, model, and manufacturer, and information about the location of your device, if you access the site from a mobile device.

Cookies & Tracking Technologies

We and our partners use cookies, pixels, and similar tracking technologies to improve your browsing experience, measure website performance, deliver relevant advertisements, and analyze usage trends. These technologies may collect information such as your IP address, browser type, device identifiers, pages viewed, and purchase history.

The Third Party Tools we Currently Use Include:

• Google Analytics and Google Tag Manager – Website usage analytics (Privacy Policy)
  We use Google Tag Manager and Google Analytics to help us understand how visitors engage with our website and to improve user experience. Google Analytics collects information such as your IP address, browser type, pages visited, and interactions on our site. This data is aggregated and anonymized, and we use it solely to analyze trends, monitor performance, and inform website improvements.  Google Tag Manager is a tag management system that allows us to efficiently manage tracking tags on our site, including those from Google Analytics. It does not collect personal data itself, but it facilitates the deployment of tools that may do so.

• Meta Pixel – Ad performance measurement and retargeting (Privacy Policy)
  We use Meta Pixel to better understand how users interact with our website and to improve our advertising efforts on Meta platforms (such as Facebook and Instagram). The Meta Pixel allows us to track user behavior on our site, such as page views and conversions, and may enable us to deliver more relevant ads based on your interactions.  Meta may use cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet and use that information to provide measurement services and target ads. You can learn more about how Meta collects and uses your data by visiting Meta’s Privacy Policy.

• Microsoft Clarity – Session analytics and heatmapping (Privacy Policy)
  We use Microsoft Clarity to better understand how users interact with our website through features like session recordings and heatmaps. Clarity helps us identify usability issues and improve overall user experience.  Clarity automatically masks or blocks all personal information and sensitive data from being captured. This means any identifiable information entered by users (such as names, email addresses, phone numbers, or payment details) is obscured before it is stored or displayed in any session recordings.

• ROKT – Personalized offers and targeted advertising (Privacy Policy)
  We use ROKT to provide personalized post-purchase offers and promotions that may be of interest to you. When you interact with these offers, ROKT may collect certain non-identifiable information such as your browser type, device information, and interaction data to deliver relevant content. All personal information (such as your name, payment details, or contact information) is masked or anonymized before it is shared with ROKT, ensuring that no personally identifiable information is disclosed. For more details on ROKT’s data practices, please review their Privacy Policy.

• BoxOffice Analytics – Newsletter distribution and engagement tracking (Privacy Policy)
  We use BoxOffice Analytics to create, send, and analyze our newsletters and other email communications. This service processes subscriber information such as names, email addresses, and engagement metrics (e.g., opens, clicks) to help us understand and improve our communications.  BoxOffice Analytics does not use your personal information for its own marketing purposes. All data is processed securely and in accordance with applicable data protection laws.

• ShowTime Analytics – Newsletter distribution and engagement tracking (Privacy Policy)
  We use ShowTime Analytics to create, send, and analyze our newsletters and other email communications. This service processes subscriber information such as names, email addresses, and engagement metrics (e.g., opens, clicks) to help us measure campaign performance and deliver relevant content.  ShowTime Analytics does not use your personal information for its own marketing purposes. All data is processed securely and in accordance with applicable data protection laws.

• Mailchimp – Newsletter distribution and engagement tracking (Privacy Policy)
  We use Mailchimp to create, send, and analyze our newsletters and other email communications. This service processes subscriber information such as names, email addresses, and engagement metrics (e.g., opens, clicks) to help us measure campaign performance and improve our communications.  Mailchimp does not use your personal information for its own marketing purposes. All data is processed securely and in accordance with applicable data protection laws. For more details, please review Mailchimp’s Privacy Policy.

Use of Your Information 

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the site to:

1. Create and manage your account.
2. Process your transactions and send you related information, including purchase confirmations and invoices.
3. Provide, operate, and maintain our services.
4. Improve, personalize, and expand our services.
5. Understand and analyze how you use our services.
6. Develop new products, services, features, and functionality.
7. Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the service, and for marketing and promotional purposes.
8. Process your transactions and manage your orders.
9. Send you text messages and push notifications.
10. Find and prevent fraud.
11. For compliance purposes, including enforcing our Terms of Service, or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.

Disclosure of Your Information 

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

1. By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
2. Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
3. Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.
4. Marketing Communications: With your consent, or where you can withdraw consent, we may share your information with third parties for marketing purposes, as allowed by law. You can unsubscribe from these marketing communications at any time by clicking the “Unsubscribe” link in any email you receive from us.
5. Third-Party Advertisers: We may use third-party advertising companies to serve ads when you visit the site. These companies may use information about your visits to the site and other websites that are contained in web cookies to provide advertisements about goods and services of interest to you.
6. Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
7. Business Partners: We may share your information with our business partners to offer you certain products, services, or promotions.
8. Other Third Parties: We may share your information with advertisers and investors for the purpose of conducting general business analysis. We may also share your information with such third parties for marketing purposes, as permitted by law.

Security of Your Information 

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Data Retention 

We keep your personal information only as long as needed to provide our services or comply with legal requirements. Once we no longer need your information, we securely delete it or anonymize it so it can’t be linked back to you.

Policy for Children 

We do not knowingly solicit information from or market to children under the age of 13. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe we might have any information from or about a child under 13, please contact us at [Contact Information].

Changes to this Privacy Policy 

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on our site. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:
[Company Name]
[Address]
[Email Address]
[Phone Number]

Addendum: GDPR and CPRA Compliance

This Addendum supplements our main Privacy Policy to address specific privacy rights and obligations under the General Data Protection Regulation (GDPR) applicable to residents of the European Union and United Kingdom, and the California Privacy Rights Act (CPRA) applicable to residents of California. If you reside in these jurisdictions, this Addendum describes additional rights you have regarding your personal data and how we comply with these regulations.

International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), United Kingdom, or Switzerland, we make sure appropriate safeguards are in place to protect your information in line with data protection laws. You can contact us to request more details about these safeguards.

Your Rights Under GDPR (EU/UK Residents) 

If you’re in the EU, UK, or similar areas, you have certain rights about your personal data, such as:

• Requesting access to the data we hold about you.

• Asking us to correct any inaccurate or incomplete information. You may also update your personal details directly in your account profile.
• Requesting deletion of your data in certain cases.
• Asking us to limit how we use your data.
• Objecting to how we process your data, including for marketing purposes.
• Requesting your data in a portable format or having it transferred to another organization.
• Withdrawing consent where we rely on it to process your data.
• Filing a complaint with your local data protection authority if you believe your rights have been violated.

Legal Bases for Processing 

We process your personal data only when we have a valid reason, such as:

• Your consent (for example, marketing emails or non-essential cookies).
• To fulfill our contract with you.
• To meet legal obligations.
• For legitimate business interests, like improving our services or preventing fraud, provided these don’t override your rights.

Your Rights Under CCPA/CPRA (California Residents) 

If you are a California resident, you have the following rights under the California Consumer Privacy Act (as updated by CPRA):

• The right to know what personal information we collect, how we use it, and who we share it with.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of your personal information for targeted advertising.
• The right to limit how we use your sensitive personal information.
• The right to be free from discrimination for exercising your privacy rights.

Notice at Collection 

In the last 12 months, we have collected personal information from California residents including identifiers, commercial data, browsing activity, geolocation, and inferences from this data. We collect this directly from you, your interactions with our site, and from our partners. We share this information with service providers, advertising partners, analytics providers, and affiliates. We do not sell your personal information but may share it for advertising purposes, where allowed by law.

How to Exercise Your Rights 

To exercise your privacy rights, please contact us by email at [Email Address] or call us at [Toll-Free Number]. We will verify your identity before processing your request to protect your information.

Children's Privacy (EU) 

We do not knowingly solicit information from or market to children under the age of 16. If we learn that we have collected personal information from a child under age 16 without verification of parental consent, we will delete that information as quickly as possible. If you believe we might have any information from or about a child under 16, please contact us at [Contact Information].