Is a privacy notice the same as a privacy policy?

People use both names. The privacy notice is what you show to the public; a policy is often your internal rules.

Do I need a cookie banner too?

If your website uses non-essential cookies, yes.

Do I need a privacy notice, and should it mention AI?

Last checked: 17 October 2026 · The AI Till, UK

Short answer

Yes, if you collect personal information, such as names, phone numbers or emails. UK GDPR gives people the right to be informed, so you must tell them what you collect, why, who you share it with and how long you keep it. If AI tools process their data, such as a chatbot or call transcription, say so.

What a privacy notice must cover

Who you are and how to contact you.
What personal data you collect and why.
Your lawful basis for each use.
Who you share it with, including software and AI providers.
Whether data goes outside the UK.
How long you keep it.
People's rights, including complaining to you and to the ICO.

When to mention AI

You use	Mention it?
ChatGPT to draft posts with no customer data	Not needed
AI to summarise customer emails or calls	Yes, as a processing purpose and provider
A website chatbot or AI receptionist	Yes, and tell people at the start of the chat or call
AI to make decisions about people	Yes, with details of human review

Is a privacy notice a legal requirement?

Yes, whenever you collect personal data, it's how you meet the right to be informed. The ICO has free guidance and a generator for small organisations.

Sources

Checked 17 October 2026. Rules and prices change, so check the source before you rely on it. This is general information, not legal, tax or financial advice.

More on data, privacy and gdpr

All data, privacy and gdpr answers · All answers · Guides · AI tools directory

Get one useful AI tool in your inbox each weekday

Free, plain English, five minutes to read. Unsubscribe any time.

See our privacy notice.