GDPR-compliant privacy notice for customers and guests, covering bookings, orders, and CCTV — required under Articles 13/14 GDPR and the Data Protection Act 2018, enforced by the Data Protection Commission.
⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.
This template has no optional clauses: the text is the same for everyone. Field placeholders are shown as labels — on the site the template is read-only, values are entered inside the system.
CUSTOMER PRIVACY NOTICE
Business name (Business address) Effective date: Effective date
This notice explains how Business name (the "Business") collects, uses and protects your personal data, in accordance with the General Data Protection Regulation ("GDPR") and the Data Protection Act 2018.
1. DATA CONTROLLER 1.1. Data controller: Data controller.
2. WHAT DATA WE COLLECT 2.1. What data we collect
3. PURPOSES AND LEGAL BASIS 3.1. Purposes & legal basis (GDPR Art. 6)
4. RECIPIENTS AND PROCESSORS 4.1. Recipients & processors
5. RETENTION 5.1. Retention period
6. YOUR RIGHTS 6.1. Your rights 6.2. You also have the right to lodge a complaint with the Data Protection Commission ("DPC") at dataprotection.ie if you believe your data has been mishandled.
7. CONTACT 7.1. Questions about this notice, or requests to exercise your rights, may be sent to Privacy contact email.
— — — ⚠️ This is a boilerplate template, not legal advice. Employment, health & safety, food safety, and consumer-protection law in Ireland changes frequently (e.g. the Employment (Miscellaneous Provisions) Act 2018, the EU (Transparent and Predictable Working Conditions) Regulations 2022, and Workplace Relations Commission Codes of Practice) — have this document reviewed and adapted by a solicitor (and, for employment matters, checked against the current WRC Code of Practice at workplacerelations.ie) before use.
Fields that belong to a switched-off clause are dimmed — they are not asked for.
e.g. bookings/reservations, orders, loyalty programme, CCTV footage
e.g. POS provider, booking platforms, payment processors
Access, rectification, erasure, restriction, objection, portability, and the right to complain to the DPC
2 of 10 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.