You can create a privacy policy page in 2 ways: using the default WordPress privacy policy generator or using a plugin like Auto Terms of Service and Privacy Policy .
If you want to use the default privacy policy generator, go to Settings » Privacy . You can now select an existing page or create a new one to display your privacy policy.
WordPress privacy policy generator
If you want to create a new privacy policy page, simply click Create New Page . This will automatically generate a privacy policy template on your new page.
On the post editing screen, you'll see a notice directing you to a privacy policy guide. It includes additional help and suggestions on what to add to your policy page.
Privacy Policy editor's notice
By default, the new page will have the data pre-filled. However, it is the user's sole responsibility to provide the information required by their privacy policy and to keep it updated and accurate.
The privacy policy page consists of several sections:
About Us: In this section, your website URL new zealand business email list is automatically specified. You will need to add any additional information you wish to display on your own.
What personal data we collect and why we collect it: In this section, you can find several subsections such as comments, media, contact forms, cookies, embedded content from other websites and analytics.
Where we send your data
And much more.
privacy policy sample with sections
Let's understand it better.
Step 3: Understand what data your WordPress website collects.
Now that you have built a basic WordPress privacy policy page, the next thing you need to do is improve your privacy policy by providing more information that it requires.
By default, the WordPress privacy policy generator explains what personal data the WordPress core software collects on your website and why it collects it. For example, you can find the data usage policy for WordPress comments, media, cookies, and embedded content in your newly created privacy policy.
Similarly, you will need to write down what other information your website collects through your WordPress theme, plugins, and third-party services you use on your website.
The data you collect on each website may vary depending on the WordPress plugins and tools you use. However, below are some essential data usage policies that you will need to explain on your WordPress website, regardless of the plugins you use.
Data Analytics Usage Policy
Contact form data usage policy
Advertising Data Usage Policy
Step 4: Improve your privacy policy by providing more details about data usage
Now you have an idea of what data your website collects through your WordPress plugins and third-party tools. To remain GDPR compliant, it is recommended to use GDPR compliant WordPress plugins and tools.
Let’s take a detailed look at how to remain GDPR compliant while using Google Analytics, contact forms, and Google AdSense ads on your website. We’ll also explain what information you should include in your privacy policy in each case.
Google Analytics
If you're like most website owners, you probably use Google Analytics to track and collect user interactions on your website. For behavioral profiling, Google Analytics collects a lot of personal data such as IP addresses, user IDs, and cookies.
To comply with the GDPR, you must do one of the following:
Anonymize data before it begins to be stored and processed.
Add an overlay on the site that informs about cookies and asks users for consent before tracking.
Both of these things are difficult to implement if you are not an Analytics expert or a WordPress developer. That is why we always recommend installing Google Analytics via a plugin rather than doing it manually .
If you are using MonsterInsights , the best Google Analytics plugin for WordPress, it is very easy to become GDPR compliant. All you have to do is install the EU Compliance plugin that helps automate the above process. Once the plugin is installed, you will be given the option to anonymize IP addresses, disable UserID tracking, disable author tracking, etc.