Your Privacy Policy MUST comply with GDPR, even if you work in Australia.
I often hear from business owners: “I am selling in Australia only – I don’t’ need to have a Privacy Policy or worry about GDPR” – This is not true!
Another common question is – “do I have to change my privacy policy and privacy practices in my business if I do not sell to people residing in the EU?”
The short answer is yes you do.
And the “why of it all” is in the video below.
Please accept YouTube cookies to play this video. By accepting you will be accessing content from YouTube, a service provided by an external third party.
If you accept this notice, your choice will be saved and the page will refresh.
Firstly, you must comply with GDPR if you have a website.
A common question is – do you have to change your privacy policy and privacy practices in your business if you do not sell to people residing in the EU.
The short answer is yes you do – you need to comply if there are users of your website that reside in the EU – and you do not have control over who goes onto your website even if you don’t sell to the EU or ship items to the EU.
This thing is that most business owners and particularly solopreneurs are very active and present in online spaces particularly Facebook business groups.
These groups are populated by people from all over the world including the EU because most business groups are interest or issue based. Geographical location is not a criterion for joining.
You have no control over who goes over to your website to check out our services or products. They may not be there to buy, although that would be good – the thing is that your website through the use of cookies and analytic apps, do capture IP information. That is personal data and does monitor the behaviour of users on your website – which pages they are visiting, how many times, what they click on etc.
So, in a nutshell, if you have a website you need a GDPR compliant Privacy Policy.
You can download my Free Checklist to review your existing Privacy Policy and ensure you do comply with GDPR.
If your privacy policy is outdated or you don’t have one – you can purchase a GDPR compliant Privacy Policy drafted to suit small businesses.

Lawyer, Contract Specialist, Speaker & Advocate for Women in Business.
Drawing on more than 15 years’ experience as a lawyer and a woman in business, Shalini Nandan-Singh helps Australian service-based entrepreneurs protect their businesses and their bottom lines with empowered legal advice and contracts.
Encouraging listeners to #loveyourlegals, Shalini firmly believes that business legals should be an authentic extension of your business. Her goal is to educate audiences that, rather than confusing legalese, business legals should be an authentic extension of your business, creating positive business boundaries that support you in working with your clients with compassion and understanding.
Disclaimer: This blog is written to support business owners to consider legal requirements and issues that may arise in business. The information provided is for general and educational purposes only. It is not intended as legal advice for your individual circumstances. Please consult your lawyer for advice specific to you and your business.