Who it's for
- Small businesses and charities putting their data protection paperwork in place
- Businesses launching or updating a website
- Anyone who has had a supplier, breach or SAR question and realised they have no documents
What's included
- Privacy Policy
- Cookie Policy
- Data Processing Agreement (Article 28)
- Data Breach Notification Letter Pack
- Subject Access Request Letter
- Website Terms and Conditions
Key points covered
- Written for UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025
- Cookie wording covers the new consent exemptions for some analytics and preference cookies
- The DPA covers each Article 28(3) requirement for controllers and processors
- The breach pack is built around the 72-hour ICO reporting deadline
- Documents still need tailoring to what your business actually does with personal data
DocPilot templates are drafted from current legislation and official guidance (GOV.UK, legislation.gov.uk and the relevant regulators), checked against those sources and fully re-reviewed every six months. They are not legal advice. How we make our documents →
Read the guide
Related documents
Privacy Policy (UK GDPR)£12.99 · See what's included →Cookie Policy£9.99 · See what's included →Business Complete Bundle£44.99 · See what's included →
Questions
Which documents are included?
The 6 documents listed above.
Does using these documents make my business GDPR-proof?
No template can do that on its own. You need to fill them in to match what your business actually does with personal data, and follow them.
Do I get Word and PDF?
Yes. Each document comes as an editable Word file and a PDF.
What if I bought a single document first?
If you bought the wrong document by genuine mistake, the Swap or Refund Promise lets you swap or get a refund within 14 days.
GDPR + Data Protection Pack
£39.99 · Word + PDF · instant download
Buy — £39.99 →Bought the wrong document by genuine mistake? Our Swap or Refund Promise lets you swap it or get a refund within 14 days.