Where Do I Put It?
Why Do I Need To Put It There?
What Do I Need To Include In It?
If you are writing a policy for the EU (European Union) then you need to include some information about how your website or blog handles personal data. You also need to include the country where you are based and a full description of your rights under GDPR (General Data Protection Regulations). When writing a policy for the EU then you also need to check that you are compliant with the law in all relevant domains (data storage, collection, and use).
How Do I Compliant?
Firstly, you need to ensure that all data processors and data controllers within your company are compliant with the GDPR. This includes everything from your hosting provider to the individual employees who process and store customer data. If you are using a third party to provide a service for your website or blog, then they should also be compliant. You can find a full guide on how to make sure that your entire company is GDPR compliant here. If you are looking to host your site or blog on a cloud service, such as Google Cloud Platform, then you will need to make sure that your hosting provider is GDPR compliant as well.