POPIA Privacy Notice Builder
Start a transparent, tailored privacy notice for review. Draft an editable South African privacy notice.
Make something useful.
Enter the details, review your result, then copy or export. No account and no AI required.
See a real task before you start
Draft a plain-language privacy notice and review each data purpose.
Describe your data practices
Produce a draft for review, not automatic certification.
Keep this work for next time
Guests can keep using this tool. Members can save and resume drafts across devices, with no AI required.
Save or export a complete editable draft, including repeated line items. Files and passwords are never included. JSON backups stay on your device unless you choose to share them.
Your result
See the output and use its export controls when ready.
Complete the form to get started.
Quality checkpoint
- List real processing activities and retention terms
- Have legal advice review the notice when appropriate
The calculator, builder or download above works independently. AI Assist is an optional explanation and writing helper, never required to complete the core task.
Start a privacy notice that explains what your business does with data
A useful privacy notice identifies the organisation collecting information, the kinds of data involved, why it is used, who receives it, how long it is kept and how people can make a request. South Africa’s Protection of Personal Information Act (POPIA) contains several conditions for lawful processing; publishing generic legal wording cannot by itself make a business compliant. This builder creates an editable starting draft based on your answers. Review it carefully, including any cross-border transfers, direct marketing and industry-specific requirements.
Before you start
A privacy notice should describe what your organisation actually collects, why it collects it, how it shares it and how people can exercise their rights. Copying a generic policy without checking real workflows can mislead visitors.
How to use this tool
- Enter the actual responsible party and an accurate information-officer contact address.
- Specify the kinds of information you collect, the reasons you process it and whether you use outside service providers.
- Download the text or draft PDF, have it reviewed, publish the approved notice and ensure your internal practices match it.
A real-world example
A website enquiry form may collect a name, email address and message to respond to a quote request. An online shop may additionally need delivery addresses and a payment processor disclosure.
Do not copy legal basis, consent promises, retention periods or international transfers from a template unless they reflect reality.
Check this before you finish
- Inventory forms, analytics, hosting, cookies and customer support tools.
- Identify retention periods and actual contact methods.
- Have the final notice reviewed against your real processing activities.
What to avoid
An automatically generated privacy notice is not legal compliance certification.
WHAT THIS TOOL ACTUALLY DOESPrepare an editable draft for review and publication.
Frequently asked questions
Does this guarantee POPIA compliance?
No. Compliance also involves actual collection, security, retention, rights handling, contracts and governance.
Should I say every use is based on consent?
Not automatically. POPIA provides several justifications; your business needs to identify the appropriate lawful basis for each processing activity.
Official sources and further reading
Requirements and policies change. Check the original organisations before making filing, legal or payroll decisions.
Continue with a related tool
Use the next tool when you're ready, without rethinking the whole workflow.
