Privacy policy
If your site collects any personal information, through a contact form, newsletter signup, bookings, payments, analytics or advertising tools, you generally need a privacy policy. It should describe what you collect, why, who receives it, how long you keep it, how people can ask about or delete their data, and how to contact you.
Write it to match what actually happens. Copying a policy from another company and leaving in promises you do not keep creates risk. Review it whenever you add a tool that handles visitor data.
Terms of use or terms of service
Terms set the rules for using the site and, for online stores, the rules for buying. They can cover ownership of content, limits on liability, acceptable use, returns, and how disputes are handled. A service business that only publishes information may need little more than a short notice, while a store needs fuller terms.
Terms for sales should be clear and visible before the customer pays, with a checkbox or similar acknowledgment where appropriate.
If you take payments or deposits, say so in the terms along with your cancellation and refund rules. Customers should be able to read these before they commit, not discover them afterward.
Disclaimers
Professional sites often add notes that the information is general and not individual advice, and that no client relationship exists until an engagement is signed. Some fields, such as law, health, tax and finance, have rules on advertising and required statements. Check with your licensing body or counsel.
Testimonials, earnings claims and before-and-after results may call for additional disclosures. Do not rely on a disclaimer to excuse a misleading claim.
Cookies and tracking notices
If you use analytics, advertising pixels or embedded media that set cookies, some jurisdictions require notice and sometimes consent before they run. Visitors from outside your own state or country may be covered by their laws. A cookie banner that blocks scripts until consent is given is more than decoration, so set it up to actually work, or reduce the tools you use.
Review the tools on your site and remove those you do not need.
Accessibility statement and other items
An accessibility statement explains your efforts and offers a contact for problems. It is no substitute for fixing the site, but it gives people a way to reach you. Businesses with email marketing need a physical address and unsubscribe handling in messages. Online stores need clear shipping, return and refund policies.
Display your business name and contact details so customers know who they are dealing with.
Placement and upkeep
Link legal pages from the footer on every page and from forms and checkout where relevant. Date them and keep old versions if the change is significant. Set a reminder to review them yearly and whenever you add a form, tool or product. Ask an attorney to review a draft if you handle sensitive data, serve many states or run a store.
Common questions
Can I use a free policy generator?
Generators give a starting point, but you must check that the text matches your real practices. An attorney review is wise for anything beyond basics.
Do I need a privacy policy if I only have a contact form?
Probably yes, because a form collects personal information. A short, accurate policy is inexpensive protection.
This guide is general information. Search engines change how they work and their guidelines; check Google's current documentation for your situation. Nobody can guarantee a ranking.