Website Privacy Policy - Basic - Limited Data 
This template has been updated to reflect changes made by the Data (Use and Access) Act 2025, including new wording on data protection complaints, compatible further use of personal data, and reasonable and proportionate searches when responding to subject access requests.
This Website Privacy Policy - Basic - Limited Data is designed for simple websites that collect little or no personal data directly from users, apart from limited contact details provided in emails or enquiries and technical data collected automatically by the website, such as IP addresses.
It is a straightforward website privacy policy template for low-data websites and has been reviewed with current best practice, the UK GDPR, the Data Protection Act 2018, and related data protection legislation in mind.
Suitable for simple websites with limited data collection
This template is intended for websites with relatively light-touch data processing. It covers the core privacy information users need where the site does not have a more complex data collection or tracking set-up.
The template includes key UK GDPR-related points such as data subject rights, retention of personal data, compatible further use, data protection complaints, and data subject access requests.
What this website privacy policy covers
- information about the website operator;
- what the policy covers and what counts as personal data;
- individuals’ rights in relation to their personal data;
- how individuals can raise concerns or complaints about the use of their personal data;
- what personal data is collected and how it is collected;
- how personal data is used, stored, and shared;
- reasonable and proportionate searches when responding to subject access requests; and
- access requests, contact details, and changes to the privacy policy.
Important scope points
This template is designed for simple websites with limited data collection. It is not intended for websites that use cookies, analytics tools, online accounts, e-commerce features, user profiles, behavioural tracking, or more complex data processing.
This template does not include recognised legitimate interests as a standard lawful basis for ordinary website processing. This is deliberate: recognised legitimate interests are limited to specific purposes under data protection law and should not be treated as a general alternative to ordinary legitimate interests. They should be used with care and professional advice should be taken where there is uncertainty.
Related guidance and alternatives
If you need help deciding whether this is the right template, see the Privacy Information Guidance Notes.
If your website uses cookies or analytics beyond a minimal set-up, a more specific website privacy template may be more suitable, such as Website Privacy Policy - First Party Cookies or Website Privacy Policy - First Party Cookies + Analytics.
Website Privacy Policy - Basic - Limited Data is part of Business . Just £38.50 + VAT provides unlimited downloads from Business for 1 year.