Five documents from our GDPR toolkit, free. These are the core documents everything else is built on: two complete and two as previews of the opening pages, plus a working record from the same set.

What you’ll receive

DocumentWhat it is for
GDPR Data Protection PolicyThe core GDPR policy: principles, lawful bases, roles, rights and how personal data is protected across the organisation.
GDPR Register of Processing Activities ProcedureRules for building and maintaining the Record of Processing Activities required by Article 30.
GDPR Data Protection Impact Assessment Process (preview: first 6 of 21 pages)When a DPIA is needed and how it is carried out, reviewed and signed off (Article 35).
GDPR Records Retention and Protection Policy (preview: first 6 of 12 pages)How long each type of record is kept, how it is protected and how it is disposed of securely.
GDPR Data Subject Request FormThe form a data subject uses to submit a request under the GDPR, with the detail you need to verify and act on it.

Where these fit in GDPR

Between them they cover accountability under GDPR: the data protection policy, how the Article 30 record is built and kept, when and how a DPIA is done, how long records are kept, and the form for handling data subject requests.

Get the five GDPR templates

Enter your email and confirm it, and the five documents arrive as one ZIP plus five separate PDFs. Links stay live for 14 days. No sales call, no card details.


We send one confirmation email first — double opt-in, no exceptions. Download links stay live for 14 days. See our privacy policy.

The rest of the toolkit

These five are a slice of the GDPR Documentation Toolkit, which carries the full documented system — policies, procedures, registers and records — in editable Word and Excel format. See the contents list and sample pages on the product page.

Free templates for other frameworks