Iubenda logo
Start generating


Table of Contents

How to Create a Privacy Policy

Want to create a privacy policy? Generating and setting up your privacy policy with iubenda is incredibly easy.

In this post, we’ll show you how to generate your own custom privacy policy. If you need any additional help, please feel free to message us via the chat window (you can find it by clicking on the green help button on the right and then clicking on the live chat button at the top). We’re happy to answer any of your questions.

👋 Before you start, if you haven’t already, you’ll need to sign-up here.

Once you’re signed up, it’s time to get started.

How to generate your privacy policy

The process is simple and pretty straightforward:

  1. Create and customize your privacy policy: It’s important to create a document that reflects all your data processing activities. Your policy will never look like another company’s one, because it should fit your unique business situation. Make sure to generate a comprehensive privacy notice that mentions all the legally-required disclosures and all the technologies that collect data on your website.
  2. Add the privacy policy to your site: After you have created your document, it’s time to install it on your website. Following legal requirements and common practice, the link to your privacy cookie policy should be visible and easily accessible. With a generator like iubenda, there are various integration methods you can pick from to make this easier for you!
  3. Update and refine your policy when needed: This is one of the top reasons why using a generator, because it allows to dynamically integrate your policy and update it at any time. While privacy laws and your website change, you will have to add new clauses or technologies. Do that in no time with iubenda.

💡 If you already have a similar site/policy, you don’t have to start from scratch: you can take advantage of the site duplication feature.


1. Create and customize your privacy policy

Your privacy policy needs to be adapted to your site’s or app’s data collection practices. You do that by adding a service.

Services generally fall into two categories:

  • Services related to your own data collection activities (eg. contact forms)
  • Services related to third-party data collection activities (eg. Google Analytics)
how to create a privacy policy

We’ve added a Site Scanner within the services window of the generator which allows you to quickly inspect your site in real-time and identify which services you need to add to your policy. Do note that although our scanner is powerful, it can only scan for technologies that are directly integrated on your pages. You will, therefore, still need to add manually the clauses that relate to data processing activities like newsletter sending.

When figuring out which basic services to add to your policy, it may help to ask yourself the following questions:

What user data do I collect myself and how do I collect it?

Eg. newsletter forms, contact forms, comment systems.

Which third-party services do I use on my site/app?

Most likely these services also process user data in some way and therefore must be included in your policy. Some common ones are:

  • Social media widgets (e.g Facebook like/share button, Twitter tweet button, Pinterest “pin it” button);
  • External account access services: services that let you access the user’s account on another platform (e.g. Facebook account access, Twitter account access);
  • Payment processors (e.g. Stripe, PayPal);
  • Tracking and analytics (e.g Google Analytics, Piwik, WordPress Stats). Please note: if using tracking, you’ll likely need to include a cookie notice and implement a cookie solution on your site);
  • Email marketing software & newsletter management services (e.g Constant Contact, MailChimp, Mad Mimi, AWeber):
  • Digital marketing ad services (e.g Google Adsense, Google Ads, AdButler).

For which purposes do I collect these data?

In most cases, the purpose of the data collection is standard and automatically included within the services added, however, there are some instances when you generate your privacy policy where you’re required to add additional disclosures. Some common ones are:

  • Selling goods and services online
  • Direct Email Marketing (DEM) purposes ( monetizing your newsletter or promoting third-party products and services)

You can also easily add custom services by simply filling out the built-in form.

You can read more about what you’re legally required to disclose and obtain consent for in our Getting Started Guide.

🇺🇸 Are you or your customers based in the US?

Check our guide on How to Activate US Compliance within the Privacy Cookie Policy Generator

2. Add the privacy policy to your site

When the privacy policy is ready it needs to be added to the site. This is done by using the embedding code we provide.

create privacy policy

You can make the privacy policy available on your site/app in the following ways:

  1. as a button with a modal window (included in the standard free version);
  2. as a direct link (e.g. for App Stores);
  3. or as a direct site embed (that shows your privacy policy as a part of your website).

The video below shows how you can easily add the privacy policy to your website:


Additional links you might find useful here are:

3. Update and refine your policy when needed

We constantly monitor the major legal regulations and automatically update your policy to keep it valid and up-to-date, however, should you need to manually update your personal information, contact details, custom clauses or add additional services, you can simply log back into your iubenda dashboard and make changes anytime.

generate privacy policy

Create a privacy policy for your website/app

Start generating

See also