# Role
You are a Privacy Law Attorney who specializes in GDPR, CCPA, data protection regulations, and website compliance.
# Task
Draft a comprehensive privacy policy that discloses data practices, complies with privacy laws, and informs users of their rights.
# Instructions
**Website Information:**
**Business:**
- Company name: [COMPANY_NAME]
- Website: [WEBSITE_URL]
- Type: [E-COMMERCE / SAAS / BLOG / MARKETPLACE / OTHER]
- Location: [COUNTRY_AND_STATE]
**Data Collected:**
```
[LIST_WHAT_DATA_YOU_COLLECT]
```
**How Data Used:**
```
[DESCRIBE_PURPOSES]
```
**Third Parties:**
```
[LIST_ANALYTICS_ADVERTISING_PAYMENT_PROCESSORS]
```
**Compliance Needed:**
[GDPR / CCPA / BOTH / OTHER]
Create privacy policy:
1. **Introduction:**
**PRIVACY POLICY**
**Last Updated:** [DATE]
[Company Name] ("we," "us," or "our") operates [website] (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information.
By using our Site, you consent to the practices described in this Privacy Policy.
2. **Information We Collect:**
**1. INFORMATION WE COLLECT**
**A. Information You Provide:**
- Account information (name, email, password)
- Payment information (credit card, billing address)
- Profile information (preferences, settings)
- Communications (emails, support tickets)
- [Other information you provide]
**B. Automatically Collected Information:**
- IP address and device information
- Browser type and version
- Pages visited and time spent
- Referring website
- Cookies and tracking technologies
**C. Third-Party Information:**
- Social media profile data (if you connect accounts)
- Analytics data from Google Analytics
- [Other third-party sources]
3. **How We Use Information:**
**2. HOW WE USE YOUR INFORMATION**
We use your information to:
- Provide and improve our services
- Process transactions and send confirmations
- Communicate with you about your account
- Send marketing communications (with consent)
- Analyze usage and improve user experience
- Prevent fraud and ensure security
- Comply with legal obligations
4. **Cookies and Tracking:**
**3. COOKIES AND TRACKING TECHNOLOGIES**
We use cookies and similar technologies to:
- Remember your preferences
- Analyze site traffic
- Personalize content
- Serve targeted advertising
**Types of Cookies:**
- Essential cookies (required for site function)
- Analytics cookies (Google Analytics)
- Marketing cookies (Facebook Pixel, Google Ads)
**Your Choices:**
You can control cookies through your browser settings. Note that disabling cookies may affect site functionality.
5. **Information Sharing:**
**4. HOW WE SHARE YOUR INFORMATION**
We may share your information with:
**Service Providers:**
- Payment processors (Stripe, PayPal)
- Email service (Mailchimp)
- Analytics (Google Analytics)
- Hosting provider (AWS)
**Business Transfers:**
- In connection with merger, acquisition, or sale of assets
**Legal Requirements:**
- To comply with legal obligations
- To protect our rights and safety
- With your consent
We do NOT sell your personal information to third parties.
6. **Data Security:**
**5. DATA SECURITY**
We implement reasonable security measures to protect your information, including:
- Encryption of data in transit (SSL/TLS)
- Secure servers and databases
- Access controls and authentication
- Regular security audits
However, no method of transmission is 100% secure.
7. **Your Rights (GDPR):**
**6. YOUR RIGHTS (GDPR - EU Users)**
If you are in the EU, you have the right to:
- **Access:** Request a copy of your personal data
- **Rectification:** Correct inaccurate data
- **Erasure:** Request deletion of your data
- **Restriction:** Limit processing of your data
- **Portability:** Receive your data in a portable format
- **Object:** Object to processing for marketing purposes
- **Withdraw Consent:** Withdraw consent at any time
To exercise these rights, contact us at [EMAIL].
8. **Your Rights (CCPA):**
**7. YOUR RIGHTS (CCPA - California Residents)**
California residents have the right to:
- Know what personal information we collect
- Know if we sell or disclose personal information
- Access your personal information
- Delete your personal information
- Opt-out of sale of personal information
- Non-discrimination for exercising rights
We do NOT sell personal information.
To exercise these rights, contact us at [EMAIL] or call [PHONE].
9. **Data Retention:**
**8. DATA RETENTION**
We retain your information for as long as:
- Your account is active
- Needed to provide services
- Required by law
- Necessary for legitimate business purposes
After which, we securely delete or anonymize your data.
10. **Children's Privacy:**
**9. CHILDREN'S PRIVACY**
Our Site is not intended for children under 13 (or 16 in EU). We do not knowingly collect information from children. If you believe we have collected information from a child, contact us immediately.
11. **International Transfers:**
**10. INTERNATIONAL DATA TRANSFERS**
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses
- Privacy Shield certification (if applicable)
- Adequacy decisions
12. **Changes to Policy:**
**11. CHANGES TO THIS PRIVACY POLICY**
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on this page
- Updating the "Last Updated" date
- [Sending email notification]
Your continued use after changes constitutes acceptance.
13. **Contact Us:**
**12. CONTACT US**
If you have questions about this Privacy Policy or wish to exercise your rights, contact us:
[Company Name]
[Address]
Email: [PRIVACY_EMAIL]
Phone: [PHONE]
**Data Protection Officer (if applicable):**
[DPO_NAME]
[DPO_EMAIL]
Provide privacy policy in a format that:
- Discloses all data practices
- Complies with GDPR and CCPA
- Explains user rights clearly
- Lists third-party services
- Describes security measures
- Provides contact information
- Uses plain language
- Is ready to post on website