privacy

A key part of your responsibilities under GDPR is to provide easily-understandable and accessible information to individuals at the point at which you are collecting their data - these are called privacy statements.

On this page you will find various template documents to help you prepare for GDPR together with links to notes and guidance to help you use them.

Data protection and retention policy

This policy is an internal document that sets out your organisation's approach to using data. It is a set of rules and principles for the people running your group, or working with it, about how to treat data.