⬛ Free Squarespace Privacy Policy Generator

Generate a GDPR & CCPA-compliant privacy policy for your Squarespace site in under 5 minutes. Covers Squarespace Commerce, Acuity Scheduling, Email Campaigns, Member Areas, your installed integrations, and visitor rights — paste straight into a Squarespace Code block. No signup, no email gate.

Why Squarespace Sites Need a Tailored Privacy Policy

Squarespace bundles a lot of data-collecting tools out of the box: Commerce, Acuity Scheduling, Email Campaigns, Member Areas, Forms, Analytics. Each one is a separate data flow that must be disclosed under GDPR Article 13 and CCPA. Squarespace's own knowledge base recommends adding a privacy policy, but doesn't generate one for you — and a generic boilerplate from elsewhere won't list these specific tools.

  • Squarespace Commerce: Order data, customer addresses, and payment data flowing to Stripe / PayPal / Square.
  • Acuity Scheduling: Captures attendee names, emails, appointment details, and custom intake form data — often sensitive (health, coaching, etc.).
  • Email Campaigns: Captures email subscribers, opens, clicks, and unsubscribes.
  • Member Areas: Captures account profiles, login activity, and (if behind a paywall) subscription data.
  • Squarespace Forms + Form Block: Every form submission is collected personal data.
  • Squarespace Analytics + custom integrations: Each tracking technology must be named alongside cookie disclosures.

Common Squarespace Integrations That Need Privacy Policy Disclosure

If your Squarespace site uses any of these, your policy must name them:

  • Squarespace Commerce, Acuity, Email Campaigns, Member Areas
  • Stripe, PayPal, Square, Apple Pay — payment processors
  • Mailchimp, ConvertKit, Klaviyo (via Zapier) — email marketing
  • Zapier, Make, n8n — workflow automation
  • Google Analytics, GA4, Meta Pixel, TikTok Pixel, Pinterest Tag — analytics + ad pixels
  • Hotjar, Microsoft Clarity — session recording (heavy GDPR implications)
  • Tidio, Crisp, Drift, Intercom — chat / helpdesk
  • YouTube embeds, Vimeo, SoundCloud — third-party media that may set cookies

How to Add Your Privacy Policy to Squarespace (4 Steps)

  1. Generate your policy using the form below. Fill in your business name, contact email, the Squarespace features and integrations you use, and the regulations to cover.
  2. In Squarespace, go to Pages → Not Linked → + → Page (Blank) and title it "Privacy Policy" with URL slug /privacy-policy.
  3. Add a Code block to the page (or a Markdown block for plain content), paste the generated HTML, and save.
  4. Link the policy from your site footer. For Commerce stores, also configure the policy URL under Commerce → Customer Notifications → Footer so it appears on every order email.

Other Policies Your Squarespace Site Likely Needs

Frequently Asked Questions

Yes. Squarespace sites collect personal data through forms, commerce orders, scheduling, member accounts, email signups, and analytics — all of which legally require a privacy policy under GDPR (EU/UK), CCPA (California), and most US state privacy laws. Squarespace itself prompts you to add one when you enable Commerce or Member Areas.
In Squarespace, go to Pages → Not Linked → + → Page (Blank), title it "Privacy Policy", and paste the generated HTML into a Code block (or use a Markdown block for plain content). Then add a footer link to /privacy-policy. For Commerce stores, also configure the privacy policy URL under Commerce → Customer Notifications → Footer.
Squarespace Commerce (Stripe / PayPal / Square payments), Acuity Scheduling (now integrated into Squarespace, captures appointment data), Email Campaigns (captures email subscribers + behavior), Member Areas (captures account profiles), Squarespace Forms (every submission), and Squarespace Analytics (visitor behavior). Plus any third-party integrations like Google Analytics, Meta Pixel, or Mailchimp.
Squarespace has a built-in cookie banner under Settings → Cookies & Visitor Data → Cookie Banner. Enable it for EU/UK compliance, but configure carefully — the default settings often allow non-essential cookies before consent, which fails GDPR strict opt-in. Pair with an itemized Cookie Policy that lists every tracking technology you use.
Acuity Scheduling (now part of Squarespace) captures attendee names, emails, appointment details, and any custom intake form data. This is sensitive personal data — your privacy policy must name Acuity, describe what data it captures, the purpose of processing, and the legal basis (typically consent or contract).