What's included: full privacy policy covering data collection, lawful bases for processing, data sharing and third-party processors, international data transfers (with SCCs/Schrems II), data retention schedule, data subject rights (GDPR Articles 12-22), breach notification, cookies section, children's privacy, and contact/DPO information. Delivered in Word and PDF, plus a clean HTML version for your website. Cookie policy included. Two revision rounds included.