top of page

Essential compliance with UK GDPR and the Data Protection Act 2018.


What is it?

A comprehensive policy template that formalises your compliance with UK GDPR and the Data Protection Act 2018. It outlines how your company collects, uses, stores, and shares employee personal data securely and in line with data protection principles.


Who is it for?

✔ All UK Employers (to accompany the Employee Privacy Notice)

✔ Small businesses needing to formalise their GDPR compliance strategy

✔ Companies looking to transparently inform employees about their data rights

✔ Teams that process personal data for payroll, performance, or compliance


What it helps you do:

  • Formalise the legal basis for processing employee data (e.g., contractual necessity)

  • Ensure data is processed lawfully, fairly, and transparently (the 7 Principles of GDPR)

  • Define the types of personal data collected and how it is used (e.g., payroll, benefits)

  • Outline the rights employees have over their personal data (e.g., access, correction)

  • Establish clear rules for Data Security, Retention, and Breach Notification


What’s included:

  • Fully editable GDPR and Data Protection Policy (Word document)

  • Comprehensive list of data collected and its legal basis for use

  • Guidelines for sharing data with third parties (HMRC, pension providers)

  • Details of employee rights under UK GDPR

  • Security and data retention guidelines

  • Signature & acknowledgment pages


Why choose U-HR templates?

  • Designed specifically for small businesses and everyday HR situations

  • Simple, practical language with no legal jargon

  • More affordable than solicitor-written policies

  • Ready to download and customise instantly


📎 Instant download

📎 Editable in Word

GDPR & Data Protection Policy Template

£22.00Price
    bottom of page