# Website privacy notice model

PrivacyBuilt Editorial | Educational working model | 3 November 2026

Adapt every section to actual practices, roles and laws. This is a drafting framework, not a ready-to-publish legal notice; never keep placeholder claims about cookies, transfers or lawful bases.

## Who is responsible
[Legal entity, role, contact details and DPO or representative details where applicable.]
## What we collect and why
[For each activity: data categories, sources, purpose, applicable lawful basis, whether provision is required and consequences of not providing it. Do not invent a basis.]
## Recipients and providers
[Disclose actual recipients or appropriate categories. Distinguish independent controllers and processors where relevant.]
## International transfers
[Describe relevant transfers and safeguards, and how information about them can be obtained. Validate current mechanisms.]
## Retention
[State periods or understandable criteria tied to real systems and purposes.]
## Rights and choices
[Describe applicable rights, request channels, verification and complaint options without promising rights that do not apply.]
## Cookies and similar technologies
[Describe technologies actually used and relevant consent or opt-out controls; align with the cookie notice.]
## Automated decisions and children
[Include required information only after assessing actual practices and legal applicability.]
## Updates
[Effective date, change process and contact route. Have a qualified reviewer approve before publication.]