Customer Privacy Notice

A full privacy notice for your consumer and business customers – from enquiry and onboarding to billing, marketing and aftercare – updated for the Data (Use and Access) Act 2025.

Editable Word document
11
10pages
Guidance notes included
aml consultancy solutions

Data protection & GDPR

Customer Privacy Notice

About this document

What it’s for

A privacy notice for the people you deal with as customers: individual (consumer) customers, sole traders, and the contacts at your business customers. It covers the whole customer relationship – quotations, contracts, delivery, payments, credit checks, account management, marketing, complaints and aftercare. Website visitors, cookies and online forms are covered by the separate Website Privacy Notice in the Contracts & terms pack, which this notice refers to.

When to use it

  • Give or link it when someone becomes a customer – in your terms, engagement letter, order confirmation or account opening form
  • Use it where your customer dealings go beyond what your website notice describes (for example credit checks, anti-money laundering checks or call recording)
  • Review it whenever you add a new system, supplier or use of customer data

What’s inside

The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.

  1. Who we are and how to contact us
  2. Who this notice applies to
  3. The personal data we collect
  4. Where we get your personal data
  5. Why we use your personal data and our lawful bases
  6. Marketing
  7. Credit reference and fraud prevention checks
  8. Automated decisions and profiling
  9. Who we share your personal data with
  10. International transfers
  11. How long we keep your personal data
  12. How we keep your personal data secure
  13. Your rights
  14. Questions and complaints
  15. Changes to this notice
  16. Who we are and how to contact us
  17. Who this notice applies to
  18. The personal data we collect
  19. Where we get your personal data
  20. Why we use your personal data and our lawful bases
  21. Marketing
  22. Credit reference and fraud prevention checks
  23. Automated decisions and profiling
  24. Who we share your personal data with
  25. International transfers
  26. How long we keep your personal data
  27. How we keep your personal data secure
  28. Your rights
  29. Questions and complaints
  30. Changes to this notice

Also included

  • Summary
  • Internal checklist – complete before publishing

How to complete it

  • Complete the tables in sections 3, 5, 9 and 11 from your record of processing activities
  • Choose between the Option A and Option B wording where shown
  • Delete rows and sections that do not apply – the notice must match what you do
  • Publish it on your website and link it from customer documents

Key points to check

  • Every legitimate interest you list should be backed by an assessment
  • Describe any credit scoring or automated decisions accurately (section 8)
  • Your complaints route must meet the 19 June 2026 rules (section 14)

Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.

Included in the pack

Data protection & GDPR

£20

for every document in this category

Editable Microsoft Word files

Guidance notes in every document

Written for UK businesses

Download and keep

Get the packSee every document in this pack →

Need more than one category?

Documents All-Access gives you every category for 12 months for £295.

Compare options →

Need it tailored?

We can adapt any template to your business, or write a document from scratch.

Talk to us →