According to the GDPR, the privacy policy must always be provided before
when to provide privacy information
Contact form with privacy policy box
As you can see from the screenshot above, on the Leevia uk number for whatsapp website we require all visitors to read the privacy policy before providing any consent . This is crucial, as failure to provide such a document violates one of the fundamental principles on which the GDPR is based: transparency .

Privacy Policy: When It's Needed
A website privacy notice is always mandatory if:
personal data is processed , that is, any information that identifies the user or can make him/her identifiable (e.g. name, surname, e-mail address, and so on);
the data processed belong to natural persons ;
the data controller is a company.