Privacy Notice (Demo Page)

⚠️ Demo Page Notice: This is a sample page hosted on GitHub Pages. The contact form on this demo site is intentionally inactive and does not process or store any personal information. This site itself does not collect or process any data other than standard metadata/logs that may be automatically collected or processed by GitHub Pages (please refer to GitHub’s own privacy policies).

If you have any concerns, please open a GitHub Issue or contact GitHub support directly.

Privacy Policy — Getting Started

A Privacy Policy is legally required in almost every jurisdiction if you collect any personal data — including names and email addresses from a contact form, IP addresses from server logs, or analytics cookies.

⚠️ Disclaimer: This guide provides starting points and links to official resources. It is not legal advice. Always consult a qualified legal professional in your jurisdiction.

---

🇩🇪🇦🇹🇨🇭 DACH Region (Germany, Austria, Switzerland)

A “Datenschutzerklärung” is mandatory under GDPR/DSGVO. It must be accessible from every page of your website (typically via a footer link).

• Datenschutz-Generator.de (Dr. Thomas Schwenke): The gold standard for German-language privacy policies. Very detailed configuration options covering analytics, contact forms, newsletter tools, and hosting providers.
• e-recht24.de — Datenschutzerklärung: Free privacy policy generator for German websites. Covers common use cases.
• WKO.at — Datenschutz: Austrian Chamber of Commerce GDPR guidance and templates.
• EDÖB (Switzerland): Swiss Federal Data Protection and Information Commissioner. Provides guidance on the revised Swiss Data Protection Act (revDSG) which took effect Sept 2023.

---

🇬🇧 United Kingdom

The UK GDPR and Data Protection Act 2018 apply to all businesses processing personal data. There is no small business exemption.

• ICO — Privacy Notice Generator: The Information Commissioner’s Office provides a free, step-by-step tool to create a compliant privacy notice tailored to your business.
• ICO — Lawful Basis Checker: Interactive tool to determine the correct legal basis for each of your data processing activities.
• ICO — SME Web Hub: Dedicated resources designed specifically for small businesses and sole traders.
• Termly.io: Generates UK GDPR-compliant privacy policies with automatic updates when regulations change.
• TermsFeed.com: Quick template-based generator with UK-specific options.

---

🇮🇪 Ireland

Ireland is the EU lead supervisory authority for many major tech companies, and the DPC provides excellent general guidance.

• DPC — Data Protection Commission: Provides Guidance for SMEs with checklists and practical steps.
• DPC — Know Your Obligations: Step-by-step guide to GDPR obligations including privacy notices.
• Enterprise Ireland: Provides business-focused data protection guidance for Irish companies.

---

🇺🇸 United States

The US has no single federal privacy law, but a rapidly growing patchwork of state laws. If you have users in these states, you may need to comply:

Key State Privacy Laws

State	Law	Threshold	Key Requirement
California	CCPA/CPRA	$25M revenue, or 100K+ consumers	“Do Not Sell” link, detailed privacy policy
Virginia	VCDPA	100K+ consumers	Opt-out rights, privacy policy
Colorado	CPA	100K+ consumers (no revenue floor!)	Universal opt-out signals, privacy policy
Connecticut	CTDPA	100K+ consumers (lowering to 35K in July 2026)	Opt-out rights, consent for sensitive data
Utah, Texas, Oregon, Montana, Delaware, Iowa, Tennessee, Indiana, New Hampshire, New Jersey, Nebraska, Kentucky, Maryland, Minnesota, Rhode Island	Various	Varies by state	Privacy policies with state-specific disclosures

Resources

• FTC — Privacy & Security: Federal Trade Commission guidance and enforcement actions.
• California AG — CCPA: Official CCPA/CPRA guidance, regulations, and FAQ.
• IAPP — US State Privacy Legislation Tracker: The most comprehensive and regularly updated tracker of all US state privacy laws.
• Termly.io — State Privacy Laws Overview: Practical overview with compliance guidance.
• Future of Privacy Forum: Non-profit think tank with excellent analysis of emerging US privacy legislation.

---

🇨🇦 Canada

• OPC — Privacy Guide for Businesses (PIPEDA): Official guide from the Office of the Privacy Commissioner. Covers the 10 fair information principles.
• OPC — Privacy Guide for Small Businesses: The Basics: Specifically designed for SMEs and freelancers.
• Quebec — Law 25 (Bill 64): Quebec’s privacy law has stricter requirements than PIPEDA — consult the Commission d’accès à l’information if you operate in Quebec.

---

🇦🇺 Australia

• OAIC — Privacy for Small Business: Guidance from the Office of the Australian Information Commissioner. Small businesses (under $3M turnover) are generally exempt, but check the exceptions (health services, trading in personal information, government contracts).
• OAIC — APP Quick Reference: Summary of the 13 Australian Privacy Principles.
• business.gov.au — Privacy Obligations: Official government resource.

---

🇳🇿 New Zealand

• OPC — Privacy Act 2020 Guide: New Zealand’s Privacy Act has no small business exemption. All businesses must comply.
• OPC — Privacy Self-Assessment: Interactive tools for assessing your privacy compliance.
• digital.govt.nz — Privacy Statements: NZ government guidance on writing privacy statements for websites.

---

🇸🇬 Singapore

• PDPC — Personal Data Protection Commission: Administers the PDPA. Provides Advisory Guidelines and a Data Protection Trustmark certification.
• PDPC — Guide to Data Protection for SMEs: Practical guide for small businesses.

---

🇿🇦 South Africa

• Information Regulator: Enforces POPIA (Protection of Personal Information Act). Provides compliance templates and guidance for responsible parties.
• POPIA Compliance Framework: Community resource with practical compliance guidance.

---

🇮🇳 India

• MeitY — Digital Personal Data Protection Act 2023: The DPDP Act and 2025 Rules introduce consent-led, rights-based data protection. Privacy notices must be in clear, plain language.
• DPDP Rules 2025: Check for the latest implementation guidance — the rules are being phased in.

---

🌍 Multi-Jurisdiction Generators & Compliance Platforms

Tool	Best For	Coverage
Iubenda	Attorney-level compliance	GDPR, UK GDPR, CCPA, LGPD, POPIA — 27+ languages
Termly.io	Ease of use, auto-updates	GDPR, UK GDPR, CCPA/CPRA, PIPEDA, POPIA, Privacy Act (AU/NZ)
TermsFeed.com	Quick template generation	Broad international coverage
Usercentrics	Cookie consent (CMP)	GDPR, CCPA, LGPD — focused on tracking consent
Complianz	WordPress-specific	GDPR, CCPA — deep WP integration
GetTerms.io	Lightweight, developer-friendly	GDPR, CCPA, PIPEDA

---

🇪🇺 EU Member States — Finding Your DPA

For EU/EEA countries not listed individually above, consult the official European Data Protection Board directory:

• EDPB — National Supervisory Authorities: Direct links to the official website of every EU/EEA data protection authority.

Key EU DPAs with especially useful privacy policy resources:

Country	Authority	Notable Tools
🇫🇷 France	CNIL	GDPR toolkit, free DPIA software
🇳🇱 Netherlands	AP	Privacy statement generator via business.gov.nl
🇪🇸 Spain	AEPD	“FACILITA RGPD” compliance tool for SMEs
🇧🇪 Belgium	APD-GBA	SME guidance and processing activity templates
🇮🇹 Italy	Garante	Templates and SME FAQ
🇵🇹 Portugal	CNPD	GDPR forms and guidelines
🇵🇱 Poland	UODO	Sector-specific guidance in Polish and English
🇸🇪 Sweden	IMY	English-language guidance available
🇩🇰 Denmark	Datatilsynet	SME compliance guidance
🇫🇮 Finland	Tietosuojavaltuutettu	Templates and guidance in Finnish, Swedish, and English
🇬🇷 Greece	HDPA	Guidelines and complaint forms
🇨🇿 Czech Republic	ÚOOÚ	Guidance for controllers
🇷🇴 Romania	ANSPDCP	SME guidance
🇭🇺 Hungary	NAIH	Registration and guidance

---

🛡️ Digital Rights & Privacy Organizations

• Electronic Frontier Foundation (EFF) — Defending digital privacy, free speech, and innovation.
• European Digital Rights (EDRi) — Pan-European digital rights defense.
• Chaos Computer Club (CCC) — Europe’s largest hacker association; strong voice on privacy.
• IAPP — Global privacy law trackers, DPA directories, and professional resources. Their “Data Protection Laws of the World” resource covers 160+ jurisdictions.
• Access Now — Global advocacy for digital rights with focus on privacy and surveillance.
• noyb — European Center for Digital Rights — Max Schrems’ organisation; active GDPR enforcement and public guidance.

---

⚖️ How to Replace This Guide

1. Create a markdown file in src/content/legal/ (e.g., src/content/legal/privacy-policy.md).
2. Paste your custom privacy policy text into it. The theme will automatically render it at /legal/privacy-policy!