The identity and contact details of your organization. The purpose and legal basis for processing personal data. Details about data retention periods. Information on individuals' rights, including the right to withdraw consent and the right to lodge a complaint with the ICO.