California Privacy Policy Template

California rules built into this template

• California privacy law: If a business meets the thresholds of the California Consumer Privacy Act (annual gross revenue above $26,625,000 as adjusted for 2025 and 2026, buying, selling, or sharing the personal information of 100,000 or more consumers or households, or earning half or more of its revenue from selling or sharing personal information), California residents have the right to know what personal information the business collects, uses, and discloses; to delete and correct it; to opt out of its sale or sharing for cross-context behavioral advertising; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights (Cal. Civ. Code § 1798.100 et seq.). Covered businesses must treat a Global Privacy Control signal as an opt-out request. The California Online Privacy Protection Act requires a website privacy policy to say how the site responds to browser "Do Not Track" signals (Cal. Bus. & Prof. Code § 22575).
• Data breaches: businesses must notify affected California residents of a security breach involving their personal information (Cal. Civ. Code § 1798.82).
• Children: a site directed to children under 13, or that knowingly collects their data, must follow the Children's Online Privacy Protection Act, including the amended COPPA Rule in effect since 2025.

What the Privacy Policy includes

1. Introduction
2. Information We Collect
3. How We Use Information
4. How We Share Information
5. Cookies and Tracking
6. International Transfers
7. Data Retention
8. Data Security
9. Your Privacy Rights
10. State Privacy Rights
11. Children's Privacy
12. Marketing Communications
13. Changes to This Policy
14. Contact Us
15. Governing Law

Frequently asked questions

Does a website need a privacy policy in California?

Yes. The California Online Privacy Protection Act requires any commercial website or online service that collects personally identifiable information from California residents to post a privacy policy, and larger businesses must also meet the California Consumer Privacy Act.

Does California have a consumer privacy law?

If a business meets the thresholds of the California Consumer Privacy Act (annual gross revenue above $26,625,000 as adjusted for 2025 and 2026, buying, selling, or sharing the personal information of 100,000 or more consumers or households, or earning half or more of its revenue from selling or sharing personal information), California residents have the right to know what personal information the business collects, uses, and discloses; to delete and correct it; to opt out of its sale or sharing for cross-context behavioral advertising; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights (Cal. Civ. Code § 1798.100 et seq.). Covered businesses must treat a Global Privacy Control signal as an opt-out request. The California Online Privacy Protection Act requires a website privacy policy to say how the site responds to browser "Do Not Track" signals (Cal. Bus. & Prof. Code § 22575).

What is the difference between the Standard and Professional Privacy Policy?

The Standard edition is a complete, state-aware Privacy Policy for common situations. The Professional edition adds longer clause coverage, schedules, and optional modules for more complex matters. You can preview either edition free before you pay.

Privacy Policy templates for other states

• Texas
• Florida
• New York
• Pennsylvania
• Illinois
• Ohio
• Georgia
• North Carolina
• Michigan
• All states and countries