Legal & privacyUsually low

Privacy policy rights section: what GDPR says you must tell people

A privacy policy is supposed to tell people what they can do: see their data, correct it, delete it, object and complain. ShipPatrol checks yours mentions those rights.

Why it matters

The rights to access, rectification, erasure, restriction, portability and objection, and the right to complain to a regulator, are on the list of things a GDPR privacy notice must include. Many short policies skip them.

How Patch checks

The AI reader looks for a section describing data subject rights. If AI isn't available we search for the usual wording.

How to fix it

  1. Add a "Your rights" section listing access, correction, deletion, restriction, portability and objection.
  2. Explain how to use them (the contact address) and that people can complain to the ICO in the UK or their local data protection authority in the EU.

Your own report goes further: it names the exact pages, services and settings Patch found on your site, and with a full report you get a fix prompt to paste into Lovable, Bolt or Cursor.

Where this applies

Applies to visitors in the UK and the EU.

Free scan

Check this on your site.

Patch runs "Privacy policy doesn't explain people's rights" along with every other check, from the UK, the EU and the US. Free, no signup.

No signup needed. Not legal advice; every check names its source.

All checks