Free tool

Personal data consent generator

Any form that asks for a name, phone or email must ask for consent. Pick the country, state the data and purposes, copy the text and place it next to the submit button.

Free
No sign-up
Runs in your browser

Consent text

CONSENT TO PERSONAL DATA PROCESSING

By submitting the form I freely and in my own interest consent to [operator name, registration number, address] (the “Operator”) processing my personal data in accordance with the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection”.

1. Data covered: name, phone number, email address.
2. Purposes: handling your request and contacting you; performing the contract; order notifications.
3. Operations: collection, recording, organisation, storage, adjustment, use, disclosure (in the cases stated below), anonymisation, blocking, deletion.
4. Disclosure to third parties: data is not disclosed to third parties except where the law requires.
5. Term of consent: until the purposes are achieved or consent is withdrawn.
6. I may withdraw consent at any time by writing to [contact email]. After withdrawal the Operator stops processing and deletes the data unless the law requires otherwise.

More about how we handle data is in the Privacy Policy.

This is a template, not legal advice. Publish the text on its own page and put a link and an unticked checkbox next to the form.

Questions and answers

Do I need consent if I have a privacy policy?

Yes. The policy explains how you handle data, while consent is an action by the person: they tick the box or press the button themselves. A link to the policy alone is usually not enough.

Can the checkbox be ticked in advance?

No. A pre-ticked box is not valid consent under the GDPR and invites complaints elsewhere. The box must be empty and the user ticks it.

Do I need a separate mailing consent?

Yes, marketing consent is not bundled with consent to process data for an order. The second generator covers it.

Which data should I list?

Only what you actually collect. Extra fields, such as a passport or birth date without reason, are a cause for complaint on their own.

What if data goes abroad?

Tick the cross-border item and name the services in the policy. Russia has required notifying Roskomnadzor of such transfers since 1 March 2023 and Kazakhstan has database storage rules.

How do I check the forms on my site?

Run a check in Awe Check: it finds forms with personal data and tests the policy link, consent and pre-ticked boxes.

Keep reading

Check the forms and policy on your site

In a minute Awe Check tests whether forms ask for consent, whether a box is ticked by default and what the policy says.

Check a site for free