Free Cookie Policy Generator for Squarespace Site — UK GDPR Compliant

🇬🇧 Key UK GDPR Requirements

Following Brexit, the UK retained its own version of GDPR (UK GDPR), supplemented by the Data Protection Act 2018. The UK GDPR is closely aligned with EU GDPR but enforced by the ICO (Information Commissioner's Office). UK GDPR fines can reach £17.5 million or 4% of global turnover. Organizations serving both UK and EU residents must comply with both frameworks.

• Same core principles as EU GDPR: lawfulness, fairness, transparency, purpose limitation
• UK-specific lawful bases for processing must be documented
• ICO registration required for most data controllers (annual fee applies)
• PECR (Privacy and Electronic Communications Regulations) governs cookies and e-marketing
• International data transfers require UK adequacy decisions or UK-specific SCCs
• Data breaches must be reported to the ICO within 72 hours

Squarespace Site — Specific Considerations

Squarespace sites use Squarespace's infrastructure and built-in analytics that automatically collect visitor data. Squarespace Commerce collects customer purchase data, and Squarespace Email Campaigns processes subscriber data. Unlike open-source platforms, Squarespace's data collection is more standardized and predictable, but you must still disclose Squarespace's role as a data processor and any third-party integrations.

Data typically collected by Squarespace Site businesses: visitor analytics and session data, Squarespace Commerce customer and order data, email campaign subscriber data, form submission data, cookie and tracking data

• Squarespace as data processor disclosure
• Squarespace Commerce payment processing (Stripe)
• Squarespace Email Campaigns subscriber data
• Third-party integrations (Mailchimp, Google Analytics)
• Squarespace Analytics data retention