This is a circa 5-page policy that you can use to create your company Privacy Policy in line with the GDPR introduced in May 2018. It can be published on your website and amended to suit your own processes, contacts, and procedures for data protection.