Getting started
Everything you need to know to get your first GDPR policy document in minutes.
How DataShark works
DataShark is a document generation platform. You answer questions about your business through our guided wizard, and we generate a personalised, legally-structured GDPR compliance document specific to your company.
Unlike generic templates, your document includes your company name, the specific types of data you collect, the third-party tools you use, and your lawful basis for processing — making it a real document, not a fill-in-the-blank template.
Step-by-step guide
The policy wizard
A guide to answering each step of the wizard accurately.
Step 1 — Company details
Enter your official company name exactly as it appears on Companies House (or your trading name if you're a sole trader). The address should be your registered business address.
Step 2 — Data types
Select every type of personal data you collect from website visitors or customers. Be thorough — it's better to include more than less. Common data types include:
- Names — collected via contact forms, checkout, or account registration
- Email addresses — almost every website collects these
- IP addresses — collected automatically by Google Analytics and most web servers
- Payment data — if you take payments online (even via Stripe or PayPal)
- Location data — if your site uses geolocation or you collect delivery addresses
Step 3 — Third-party processors
Select every third-party service that processes personal data on your behalf. This includes:
- Analytics — Google Analytics, Hotjar, Mixpanel
- Email marketing — Mailchimp, HubSpot, Klaviyo
- Payments — Stripe, PayPal, Sage Pay
- Hosting — AWS, Google Cloud, WP Engine
- CRM — Salesforce, HubSpot, Zoho
- Accounting — Xero, QuickBooks
Step 4 — Legal basis
Select the lawful basis you rely on for processing personal data. Most small businesses use:
- Contract — for processing customer orders and delivering your service
- Legitimate interests — for analytics, marketing to existing customers, and business operations
- Consent — for email marketing to new prospects and non-essential cookies
- Legal obligation — for financial records and statutory reporting
If you're unsure, selecting "Legitimate interests" and "Contract" covers most small business scenarios. You can always regenerate your document later.
Your documents
How to access, download, and use your generated documents.
Where to find your documents
All generated documents are stored in your account at thedatashark.com/documents. Log in at any time to view and re-download them.
How to download
Click the "Download PDF" button next to your document. It will open in your browser as a formatted HTML page. To save as a PDF:
- Press Ctrl+P (Windows) or Cmd+P (Mac)
- Select "Save as PDF" from the printer dropdown
- Click Save
Where to publish your Privacy Policy
Your Privacy Policy must be easily accessible on your website. Best practice is to:
- Link to it in your website footer on every page
- Link to it from any forms that collect personal data (contact forms, newsletter sign-ups)
- Link to it from your checkout process if you take payments
How often should I update my policy?
Review your Privacy Policy at least once a year, or whenever you:
- Add a new third-party tool that processes personal data
- Start collecting a new type of personal data
- Change your lawful basis for processing
- Make any significant change to how you use personal data
We include a review date in every document. When your review date arrives, simply log in and generate an updated document.
Privacy Policy
Our core GDPR compliance document — required for every UK website.
What's included
Your DataShark Privacy Policy covers all 13 sections required by Articles 13 and 14 of the UK GDPR:
- Data controller identity and contact details
- Data Protection Officer contact (if applicable)
- What personal data you collect and why
- Your lawful basis for processing each data category
- Third-party processor disclosures (Article 28)
- International data transfer safeguards
- Retention periods
- All eight data subject rights
- Right to withdraw consent
- Right to lodge a complaint with the ICO
- Cookie information
- Special category data (if applicable)
- Children's data (if applicable)
Pricing
| Document | Price | Delivery |
|---|---|---|
| GDPR Privacy Policy | £49 | Within 1 hour |
Cookie Policy
Required if your website uses any non-essential cookies.
Do I need a Cookie Policy?
Yes, if your website uses any of the following:
- Google Analytics or any other analytics tool
- Facebook Pixel, LinkedIn Insight Tag, or any advertising cookies
- HotJar or any user behaviour tracking
- Any third-party widgets that set cookies
What's included
- Explanation of what cookies are
- List of cookies used, categorised by type
- Third-party cookie disclosures
- Duration of each cookie
- How users can manage and opt out of cookies
- Links to browser settings for cookie control
Pricing
| Document | Price | Delivery |
|---|---|---|
| Cookie Policy | £29 | Within 1 hour |
Data Processing Agreement
Required under Article 28 when sharing data with third-party processors.
What is a DPA?
A Data Processing Agreement is a legally binding contract between you (the data controller) and any third party that processes personal data on your behalf (a processor). Article 28 of the UK GDPR requires you to have a written DPA in place with every processor you use.
Do I already have one?
Many major processors include DPA terms in their standard agreements. Check these first:
- Google — included in Google's Terms of Service
- Stripe — included in Stripe's Data Processing Agreement
- Mailchimp — available as a separate DPA to sign
- AWS — included in AWS's Data Processing Addendum
For processors that don't provide a DPA, you'll need to generate one using DataShark.
Pricing
| Document | Price | Delivery |
|---|---|---|
| Data Processing Agreement | £79 | Within 1 hour |
Complete Bundle
All three documents together — the best value option.
What's included
The Complete Bundle includes all three compliance documents:
- GDPR Privacy Policy (normally £49)
- Cookie Policy (normally £29)
- Data Processing Agreement (normally £79)
All three generated from your single wizard completion and delivered within 1 hour.
Pricing
| Option | Price | Saving |
|---|---|---|
| Complete Bundle | £99 | Save £58 vs buying separately |
| If bought separately | £157 | — |
Payments & billing
How payments work and what to expect.
How do I pay?
We currently accept payment via Wise. Click the payment button on the review screen and you'll be redirected to our Wise payment page. You can pay using a Wise account or via bank transfer.
Is payment secure?
Yes. All payments are processed by Wise, a regulated financial institution. DataShark does not store your card details or payment information.
Is it a subscription?
No. All DataShark pricing is one-time only. You pay once and own your document permanently. There are no recurring charges, annual renewals, or hidden fees.
When will I receive my document?
Once your payment is confirmed, your document is generated and emailed to you within 1 hour. The email comes from noreply@thedatashark.com.
Can I get a VAT receipt?
Yes. Email hello@thedatashark.com with your order details and we'll issue a VAT receipt within 1 business day.
Refunds
Our 7-day money-back guarantee.
Refund policy
We offer a 7-day full refund guarantee on all purchases. If you're not satisfied with your document for any reason, contact us within 7 days of purchase and we'll refund you in full — no questions asked.
How to request a refund
Email hello@thedatashark.com with:
- Your name and account email address
- The document you purchased
- Your reason for requesting a refund (optional)
We'll process your refund within 3–5 business days to your original payment method.
Can I get a refund after downloading?
Yes. We don't withhold refunds because a document has been downloaded. If you're within 7 days of purchase and unsatisfied, you're entitled to a full refund regardless.
Frequently asked questions
Quick answers to the most common questions.
Contact us
Can't find the answer you're looking for? We're here to help.
For refund requests, document re-generation, or billing enquiries, email hello@thedatashark.com and include your account email address and order details.