GDPR Privacy Policy Template for Non-EU Businesses

Use This Template

This Privacy Policy template is designed for non-EU businesses that process EU personal data. Adapt it to your specific processing activities and legal bases. Replace bracketed [text] with your details. This is a template, not legal advice. Have a qualified lawyer review it for your specific situation.

[Your Company Name] Privacy Policy

Last updated: [Date]

1. Who We Are

[Your Company Name] ([registration number], [registered address]) is the data controller for the personal data processed through our [website/app/service]. If you are located in the European Union, our EU Representative under Article 27 is:

EU Shield LLC
[EU address]
Email: [EU Rep email]
Role: GDPR Article 27 EU Representative — accepts correspondence from EU supervisory authorities and data subjects on our behalf

2. What Personal Data We Collect

We collect: [list categories: name, email, IP address, payment data, usage data, etc.]. We collect this data when you: [list: register, purchase, contact us, etc.].

3. Why We Process Your Data (Purposes and Legal Bases)

Purpose	Legal Basis	Data Categories
[Order fulfillment]	Contract (Art 6(1)(b))	[Name, address, email]
[Newsletter]	Consent (Art 6(1)(a))	[Email]
[Analytics]	Consent (Art 6(1)(a))	[IP, browsing data]

4. How Long We Keep Your Data

We retain your personal data for: [retention periods per data category, e.g., account data: duration of account + 90 days; billing data: 7 years; analytics: 12 months].

5. Your Rights

EU data subjects have the right to: access (Article 15), rectify (Article 16), erase (Article 17), restrict processing (Article 18), data portability (Article 20), and object (Article 21). To exercise these rights, contact us at [email] or our EU Representative at [EU Rep email].

6. Contact

Data Controller: [Your name, address, email]
EU Representative: EU Shield, [EU address], [EU Rep email]

Get your EU Representative →