Map data first
A privacy policy should follow the product: categories of personal data, lawful bases, purposes, processors, retention periods, transfers, and rights routes.
Guide
UK GDPR privacy policy template
How to build a privacy notice that maps real data flows rather than copying generic boilerplate.
By The Counsel editorial deskReviewed against primary legislation and case law for England & WalesLast reviewed 15 June 2026How we source this →
Do not bury cookies
Analytics, advertising pixels, and preference cookies often need PECR analysis as well as UK GDPR transparency. The notice should connect to the cookie layer.
Generate and test
Generate the notice, then run a compliance audit against actual product behaviour before launch.
Guide
AI contract review for England & Wales
How AI contract review should work when the governing law is England & Wales rather than a generic US contract model.
Guide
UK NDA template guide
What to include in a non-disclosure agreement governed by the laws of England & Wales.
Employment
IR35 contract review checklist
A practical checklist for reviewing contractor agreements against IR35 risk indicators.