This is a Data Protection Policy for any size employer to comply with GDPR and Data Protection Act 2018. Available as a download.