1. Cookies and Tracking Technologies: Required if the organization uses websites or online tracking tools

2. Direct Marketing: Required if personal data is used for direct marketing purposes under PDPO requirements

3. Children's Privacy: Required if services may be used by or data collected from children

4. Employee Data Processing: Required if the privacy notice covers employee personal data

5. Special Categories of Data: Required if processing sensitive personal data like health information

6. Automated Decision Making: Required if using automated processing or profiling

7. Local Privacy Requirements: Required if specific jurisdictional variations need to be addressed

1. Schedule 1: Detailed Data Processing Activities: Comprehensive list of processing activities, purposes, and legal bases

2. Schedule 2: Third Party Recipients: List of categories of third parties with whom data is shared

3. Schedule 3: International Transfer Mechanisms: Details of safeguards for international data transfers

4. Schedule 4: Cookie List: Detailed list of cookies and tracking technologies used

5. Schedule 5: Country-Specific Privacy Requirements: Jurisdiction-specific privacy requirements and variations

6. Appendix A: Data Subject Request Form: Standard form for submitting data subject rights requests

7. Appendix B: Security Measures: Detailed description of security measures and protocols