Free Refund Policy Generator for Mobile App — UK GDPR Compliant

🇬🇧 Key UK GDPR Requirements

Following Brexit, the UK retained its own version of GDPR (UK GDPR), supplemented by the Data Protection Act 2018. The UK GDPR is closely aligned with EU GDPR but enforced by the ICO (Information Commissioner's Office). UK GDPR fines can reach £17.5 million or 4% of global turnover. Organizations serving both UK and EU residents must comply with both frameworks.

• Same core principles as EU GDPR: lawfulness, fairness, transparency, purpose limitation
• UK-specific lawful bases for processing must be documented
• ICO registration required for most data controllers (annual fee applies)
• PECR (Privacy and Electronic Communications Regulations) governs cookies and e-marketing
• International data transfers require UK adequacy decisions or UK-specific SCCs
• Data breaches must be reported to the ICO within 72 hours

Mobile App — Specific Considerations

Mobile apps are subject to strict data policies from both Apple App Store and Google Play Store, and both require a public privacy policy URL before approval. Apps frequently access device permissions — location, camera, contacts, health data — each of which must be explicitly disclosed and legally justified.

Data typically collected by Mobile App businesses: device identifiers, location data, camera/microphone access, push notification tokens, in-app behavior, health/fitness data

• App Store and Google Play compliance
• Device permission justifications (location, camera, contacts)
• Push notification data
• In-app purchase terms
• Children's data (COPPA) if app targets under-13s