Although having some legal support when drafting such documents would be advisable you can still use some templates that you can find online, I would anyway stay clear of so called free documents as usually they are poorly written.You can find some suitable templates in this GDPR Mini Toolkit for Websites (https://advisera.com/eugdpracade...).