Free Refund Policy Generator for Wix Site — GDPR Compliant

🇪🇺 Key GDPR Requirements

The GDPR (General Data Protection Regulation) is the world's most comprehensive data privacy law, applying to any organization that processes data of EU residents — regardless of where the organization is based. Non-compliance can result in fines of up to €20 million or 4% of annual global turnover, whichever is higher.

• Lawful basis for processing must be identified and documented (consent, contract, legitimate interest, etc.)
• Privacy by design and default must be embedded in your systems
• Data subjects have the right to access, rectify, erase, and port their data
• Data breaches must be reported to supervisory authorities within 72 hours
• A Data Protection Officer (DPO) is required for large-scale processing of sensitive data
• Data Processing Agreements (DPAs) required with all third-party processors
• International transfers outside the EEA require specific safeguards (SCCs, adequacy decisions)

Wix Site — Specific Considerations

Wix sites operate on Wix's infrastructure, making Wix a data processor for all visitor data collected through your site. Wix automatically collects visitor analytics, enables Wix Apps that may collect additional data, and uses cookies for site functionality. If you use Wix Stores, Wix Bookings, or Wix Members, each collects its own data set that must be disclosed in your privacy policy.

Data typically collected by Wix Site businesses: visitor analytics data, form submission data, Wix Stores customer and order data, Wix Members account data, Wix Bookings appointment data, cookie and tracking data

• Wix as infrastructure data processor
• Wix Apps data collection disclosure
• Wix Stores payment and order data
• Wix Members account and login data
• GDPR tools available via Wix's compliance features