About This Policy
This is a UK GDPR policy. If the organization is in the EU, use a region specific policy. If the organization is outide of the EU and UK then this policy will be adequate. The EU has said the UK policy is EU compliant.
Who Needs This Policy
Any organization that is in the UK or does business in the UK. Organizations doing business outside of the EU could also use this as an EU compliant policy.
The rules are more strict if you are soliciting people or selling a product with personal data; use a policy and privacy notice from your attorney.