Free Data Governance Templates

The Websites, Communications & Cookies Privacy Notice explains how Mozilla collects and uses personal data across its websites, apps, communications, campaigns, and payments, including the use of cookies, analytics, and third-party service providers. It applies broadly to Mozilla-operated domains and services and is grounded in Mozilla’s established privacy framework, clearly outlining user choices, data controls, and compliance with applicable data protection laws.

The GitHub Marketplace Developer Agreement sets out the terms for developers to publish and distribute applications, extensions, and actions on GitHub Marketplace, including licensing, privacy, compliance, and revenue-sharing requirements. It is part of GitHub’s official contractual framework, backed by Microsoft, and ensures developers operate within trusted, legally enforceable standards while protecting end users and GitHub’s platform integrity.

This template sets out the organisation’s process for identifying, managing, recording, and reporting personal data breaches in compliance with the UK GDPR and the Data Protection Act 2018. It explains staff responsibilities, internal escalation, and when and how breaches must be notified to the ICO and affected individuals.

The Mozilla Ad-Targeting Guidelines set rules for ethical advertising by prohibiting invasive targeting methods (such as retargeting, cross-device tracking, or using Mozilla’s data) while allowing limited, privacy-respecting tactics like contextual, device, geographic, and browser-based targeting. As an official Mozilla policy, it provides trustworthy standards for privacy-focused marketing practices used by a globally respected open-source organisation.

The GitHub Terms of Service is the master agreement governing use of GitHub.com—including account requirements, content ownership and licenses, acceptable use, payment/cancellation, and liability limits. It’s the official, legally binding policy published by GitHub, making it the authoritative source for users’ rights and obligations on the platform.

The GitHub General Privacy Statement explains how GitHub (and GitHub B.V.) collects, uses, shares, and protects personal data across its services, including users’ rights (GDPR/US state laws), data transfers, cookies, and security/retention practices. It is an official GitHub policy (under Microsoft) that references concrete compliance frameworks like the EU Standard Contractual Clauses and the Data Privacy Framework, making it a reliable source for understanding GitHub’s privacy posture.

The GitHub Terms for Additional Products and Features supplement GitHub’s standard agreements by setting specific rules for using services like Actions, Codespaces, Advanced Security, npm, Packages, Pages, and GitHub Copilot. These terms ensure compliance, clarify billing and usage limits, and protect both users and GitHub, making them a trusted extension of GitHub’s official contractual framework under Microsoft’s governance.

The GitHub Active Malware or Exploits Policy prohibits the use of GitHub’s platform to deliver malware or facilitate unlawful attacks that cause technical harm, while still allowing dual-use content for legitimate security research and educational purposes. Maintained by GitHub as part of its Acceptable Use Policies, it balances protecting the community against abuse with supporting open security research and responsible disclosure practices.

The GitHub Subprocessors Policy identifies the third-party vendors GitHub authorizes to process customer and personal data on its behalf under the GitHub Data Protection Agreement. Maintained and published by GitHub, this list ensures GDPR compliance and transparency by providing at least 30 days’ notice before adding new subprocessors.

The GitHub Marketplace Terms of Service set the rules for using GitHub Marketplace, which lets users purchase or install developer apps and actions that integrate with GitHub accounts. Issued and maintained by GitHub, these terms provide a trusted framework covering payments, data sharing, liability, and third-party developer responsibilities.