Privacy Policy (US) by OLL
Updated 18 December 2025
Privacy Policy
Last Updated: [effective date]
This Privacy Policy describes how [company name] ("we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our website, mobile applications, and other online services that link to this Privacy Policy (collectively, the "Services"), as well as offline services and interactions.
By using our Services, you acknowledge that your personal information will be handled as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.
Information We Collect
We collect personal information in the following categories:
Information You Provide
Identifiers: Name, email address, phone number, postal address, account credentials, and similar identifiers when you create an account, make a purchase, or contact us.
Commercial Information: Purchase history, products or services considered, and other purchasing or consuming tendencies.
Payment Information: Payment card details and billing information (processed through our payment processors).
Communications: Information you provide when you contact us, respond to surveys, or participate in promotions.
Information Collected Automatically
Device and Usage Information: IP address, browser type, operating system, device identifiers, pages viewed, links clicked, and the date and time of your visit.
Geolocation Data: Approximate location based on IP address; precise location only with your consent where required.
Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to collect information about your interactions with our Services. See our Cookie Policy for more details.
Information from Third Parties
Business Partners: We may receive information from advertising partners, analytics providers, and social media platforms.
Public Sources: We may collect information from publicly available sources.
Sensitive Personal Information
Include this section only if you collect sensitive personal information. List the specific categories collected and purposes.
We may collect the following categories of sensitive personal information: [list sensitive categories collected, e.g., precise geolocation, account login credentials]. We use this information only for the purposes disclosed at collection or as permitted by law.
Sources of Personal Information
We collect personal information from the following sources:
Directly from you when you provide it
Automatically through your use of our Services
From third-party business partners and service providers
From publicly available sources
How We Use Your Information
We use personal information for the following purposes:
Provide Services: To fulfill orders, process payments, provide customer support, and deliver our products and services.
Communications: To send transactional messages, respond to inquiries, and (with your consent where required) send marketing communications.
Personalization: To personalize your experience and deliver content relevant to your interests.
Analytics and Improvement: To analyze usage patterns, improve our Services, and develop new features.
Advertising: To deliver targeted advertising based on your interests and measure advertising effectiveness. [describe cross-context behavioral advertising if applicable.]
Security and Fraud Prevention: To detect, prevent, and respond to fraud, unauthorized access, and other harmful activities.
Legal Compliance: To comply with legal obligations and enforce our terms and policies.
How We Share Your Information
We may disclose your personal information to the following categories of recipients:
Service Providers
We share information with third-party service providers who perform services on our behalf, including payment processing, order fulfillment, shipping, customer support, analytics, and marketing. These providers are contractually obligated to use your information only as directed by us.
Business Partners
We may share information with business partners for joint marketing initiatives or co-branded services.
Advertising Partners
Customize this section based on your actual advertising practices. If you share data with ad networks for cross-context behavioral advertising, this may constitute "sale" or "sharing" under state privacy laws.
We may share identifiers and online activity information with advertising partners to deliver targeted advertisements and measure their effectiveness. This may be considered "selling" or "sharing" personal information under certain state privacy laws. See the "Your Privacy Choices" section for opt-out options.
Legal and Safety Disclosures
We may disclose information when required by law, to respond to legal process, to protect our rights and safety, to protect the rights and safety of others, or in connection with an investigation of suspected or actual illegal activity.
Business Transfers
In connection with a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity.
With Your Consent
We may share your information for other purposes with your consent.
Sale and Sharing of Personal Information
Customize based on actual practices. State "We do not sell or share personal information" only if you can substantiate this claim. If you share identifiers with ad networks for cross-context behavioral advertising, you likely sell/share under CA law.
We may sell or share personal information with advertising partners for purposes of cross-context behavioral advertising. The categories of personal information we have sold or shared in the preceding 12 months include: [list categories, e.g., identifiers, internet activity, inferences]. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Retention of Personal Information
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary by data category:
Account Information: Retained while your account is active and for [retention period, e.g., 3 years] after account closure.
Transaction Records: Retained for [retention period, e.g., 7 years] to comply with legal and tax obligations.
Marketing Data: Retained until you opt out or for [retention period, e.g., 2 years] of inactivity.
Cookies and Analytics: Retained for [retention period, e.g., 13 months].
After the applicable retention period, we securely delete or anonymize your information unless a longer retention is required by law.
Your Privacy Choices
Account Settings
You may update your account information or communication preferences by logging into your account or contacting us at [privacy email].
Marketing Communications
You may opt out of marketing emails by clicking "unsubscribe" in any marketing email or by contacting us. You may continue to receive transactional communications.
Cookies and Tracking
You can manage cookie preferences through your browser settings or our cookie preference center. Note that disabling cookies may affect functionality.
Targeted Advertising Opt-Out
You may opt out of targeted advertising through the following methods:
Use our "Do Not Sell or Share My Personal Information" link
Enable a recognized opt-out preference signal (such as Global Privacy Control) in your browser
Submit a request through our privacy request form at [privacy request url]
State Privacy Rights
Depending on your state of residence, you may have additional rights regarding your personal information. This section describes rights available under various state privacy laws.
Rights Available to Residents of Certain States
If you are a resident of California, Colorado, Connecticut, Virginia, or another state with a comprehensive privacy law, you may have the following rights:
Right to Know/Access: Request information about the personal information we have collected about you, including the categories and specific pieces of information.
Right to Delete: Request deletion of your personal information, subject to certain exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Portability: Receive your personal information in a portable format.
Right to Opt Out of Sale/Sharing: Opt out of the sale or sharing of your personal information for targeted advertising.
Right to Opt Out of Targeted Advertising: Opt out of targeted advertising based on your personal information.
Right to Opt Out of Profiling: Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
Right to Limit Use of Sensitive Information: Limit our use of sensitive personal information to purposes necessary to provide the services you requested.
Right to Non-Discrimination: Exercise your privacy rights without discriminatory treatment.
How to Exercise Your Rights
To submit a privacy request, you may:
Email us at [privacy email]
Submit a request through our online form at [privacy request url]
Call us at [privacy phone]
We will verify your identity before processing your request. For requests to know or delete, we will verify your identity by matching information you provide with information we have on file. You may designate an authorized agent to submit requests on your behalf; we may require proof of authorization.
Opt-Out Preference Signals
We honor opt-out preference signals recognized under applicable law, including Global Privacy Control (GPC). When we detect such a signal, we will process it as a valid request to opt out of the sale and sharing of personal information associated with your browser or device. If you are logged into an account, we will also apply the opt-out to your account.
Appeals Process
If we deny your privacy request, you may appeal our decision by contacting us at [privacy email] with the subject line "Privacy Appeal." We will respond to your appeal within the timeframe required by applicable law. If your appeal is denied, you may contact your state Attorney General to lodge a complaint.
California-Specific Disclosures
Include this section if California consumers use your Services. Customize based on actual data practices.
The following additional disclosures apply to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
Categories Collected (Past 12 Months): Identifiers; commercial information; internet or electronic network activity; geolocation data; inferences; [add other applicable categories].
Categories Sold or Shared (Past 12 Months): [list categories or state "none" if accurate].
Categories Disclosed for Business Purposes (Past 12 Months): Identifiers; commercial information; internet or electronic network activity; [add other applicable categories].
Right to Limit Sensitive Personal Information: If we use sensitive personal information beyond purposes necessary to provide our Services, you may request that we limit such use by clicking "Limit the Use of My Sensitive Personal Information" or submitting a request as described above.
Do Not Sell or Share My Personal Information: To opt out of the sale or sharing of your personal information, click the "Do Not Sell or Share My Personal Information" link in the footer of our website or submit a request as described above.
Financial Incentives: [describe any loyalty programs or financial incentives tied to personal information, or state that none are offered.]
Notice at Collection
This section summarizes notice-at-collection requirements. Ensure this information appears at or before the point of collection for California consumers.
At or before the point of collection, we provide notice of:
The categories of personal information collected
The purposes for which the information is used
Whether the information is sold or shared
The length of time we retain each category of information
See the sections above for details on these topics.
Children's Privacy
Our Services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe we have collected information from a child under 13, please contact us at [privacy email].
We do not knowingly sell or share the personal information of consumers under 16 years of age.
Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure. These measures include encryption, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
International Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using our Services, you consent to the transfer of your information to these countries.
Third-Party Links and Services
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last Updated" date. For material changes, we will provide notice as required by law, which may include email notification or a prominent notice on our Services. Your continued use of our Services after such changes constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
[company name]
Attn: Privacy
[company address]
Email: [privacy email]
Phone: [privacy phone]
About this template
What is this template?
Privacy Policy (US) by OLL is a free, ready-to-use Data Protection & Privacy template you can open, customize, and download on GitLaw. It gives you a professionally structured starting point, so you never have to draft from a blank page. The wording is plain and modern, organized into clear sections that are easy to read, edit, and adapt to your own situation before you share or sign it.
When should you use it?
Reach for this Data Protection & Privacy template whenever you need a reliable agreement quickly and want to be sure the essentials are covered. It suits individuals, freelancers, startups, and established businesses alike. Instead of paying for a document drafted from scratch, you can start here, tailor the details to your arrangement, and have a polished draft ready in minutes. This version is drafted with United States of America in mind, though you should always review the final wording against the laws that apply to you.
What's typically included?
A well-drafted Data Protection & Privacy usually sets out the parties involved, the scope of the agreement, and each side's rights and responsibilities. Expect sections covering key terms and definitions, how long the agreement lasts, how it can be ended, and what happens if something goes wrong. This template brings those building blocks together in a sensible order, so you can focus on the specifics rather than worrying about what to include. Open it to read the full document, then sign up to edit, negotiate, and e-sign it directly in GitLaw.