🇪🇺 GDPRWix SitePrivacy Policy

Free Privacy Policy Generator for Wix Site — GDPR Compliant

Wix sites operate on Wix's infrastructure, making Wix a data processor for all visitor data collected through your site. Wix automatically collects visitor analytics, enables Wix Apps that may collect additional data, and uses cookies for site functionality. If you use Wix Stores, Wix Bookings, or Wix Members, each collects its own data set that must be disclosed in your privacy policy. The GDPR (General Data Protection Regulation) is the world's most comprehensive data privacy law, applying to any organization that processes data of EU residents — regardless of where the organization is based.

No signup required Download as HTML Ready in 2 minutes

What This Privacy Policy Covers

All sections are included and pre-filled for Wix Site businesses

Introduction

Included in all documents

Information We Collect

Included in all documents

How We Use Your Information

Included in all documents

How We Share Your Information

Included in all documents

Cookies and Tracking Technologies

Included in all documents

Data Retention

Included in all documents

Your Rights Under the GDPR

Included in all documents

Your California Privacy Rights (CCPA)

Included in all documents

Your Rights Under the DPDPA (India)

Included in all documents

Children's Privacy

Included in all documents

Data Security

Included in all documents

Third-Party Links

Included in all documents

Changes to This Privacy Policy

Included in all documents

Contact Us

Included in all documents

🇪🇺 Key GDPR Requirements

The GDPR (General Data Protection Regulation) is the world's most comprehensive data privacy law, applying to any organization that processes data of EU residents — regardless of where the organization is based. Non-compliance can result in fines of up to €20 million or 4% of annual global turnover, whichever is higher.

  • Lawful basis for processing must be identified and documented (consent, contract, legitimate interest, etc.)
  • Privacy by design and default must be embedded in your systems
  • Data subjects have the right to access, rectify, erase, and port their data
  • Data breaches must be reported to supervisory authorities within 72 hours
  • A Data Protection Officer (DPO) is required for large-scale processing of sensitive data
  • Data Processing Agreements (DPAs) required with all third-party processors
  • International transfers outside the EEA require specific safeguards (SCCs, adequacy decisions)
Data retention note: Data must not be kept longer than necessary for the specified purpose. Retention periods must be documented and enforced.

Ready to generate your Privacy Policy?

Free, no signup, customized for Wix Site under GDPR.

Wix Site — Specific Considerations

Wix sites operate on Wix's infrastructure, making Wix a data processor for all visitor data collected through your site. Wix automatically collects visitor analytics, enables Wix Apps that may collect additional data, and uses cookies for site functionality. If you use Wix Stores, Wix Bookings, or Wix Members, each collects its own data set that must be disclosed in your privacy policy.

Data typically collected by Wix Site businesses: visitor analytics data, form submission data, Wix Stores customer and order data, Wix Members account data, Wix Bookings appointment data, cookie and tracking data

  • Wix as infrastructure data processor
  • Wix Apps data collection disclosure
  • Wix Stores payment and order data
  • Wix Members account and login data
  • GDPR tools available via Wix's compliance features

Frequently Asked Questions

Do I legally need a Privacy Policy for my Wix Site website?

Yes. If you collect any personal data from users — including email addresses, analytics cookies, or payment information — you are legally required to have a Privacy Policy under GDPR (EU) 2016/679, ePrivacy Directive (Cookie Law), National implementing laws. Non-compliance can result in significant fines.

What should a Privacy Policy for Wix Site businesses include under GDPR?

A GDPR-compliant Privacy Policy for Wix Site businesses must disclose: what data you collect (visitor analytics data, form submission data, Wix Stores customer and order data, Wix Members account data, Wix Bookings appointment data, cookie and tracking data), the legal basis for processing, data retention periods, and users' rights. Lawful basis for processing must be identified and documented (consent, contract, legitimate interest, etc.).

What data does a Wix Site typically collect that must be disclosed?

A Wix Site typically collects: visitor analytics data, form submission data, Wix Stores customer and order data, Wix Members account data, Wix Bookings appointment data, cookie and tracking data. Under GDPR, each category of data must be explicitly disclosed in your Privacy Policy along with the purpose for collecting it and the legal basis used. Failing to disclose any collected data category is a violation.

Is a Data Protection Officer (DPO) required for a Wix Site under GDPR?

Under GDPR, a DPO is required for organizations that carry out large-scale processing of sensitive data or systematic monitoring of individuals. Many Wix Site companies fall into this category due to their data volume. The DPO must be independent, have expert knowledge of data protection law, and be reachable by data subjects.