This is what the privacy policy page could look like.
We highly recommend going with the GDPR Ready Compliance course, that includes everything you need to get started, including a privacy policy, terms of agreement, and an e-course that teaches you everything you need to know about what it means for you, your business and what you’ll need to get through it.
In full disclosure, we have personally purchased and bought the above course, and have used the resources on our site at LaLune. For that reason, we highly recommend taking the course and getting the things you need to be compliant without all the fuss. By clicking the link above, we get a small affiliate commission if you purchase the course.
Who we are
This is where you add some text about your website and who you are.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.