Legal
Do I need a privacy policy for a small website?
Yes, if the site collects any personal data at all — and a contact form counts, as do server logs and most analytics. Under UK and EU data protection law a privacy notice is mandatory whenever personal data is processed, regardless of how small the business is.
What counts as collecting personal data
- A contact form capturing a name, email or phone number
- Analytics that sets a cookie or records an IP address
- Server access logs, which record IP addresses by default
- A newsletter signup, a booking form, or a comment box
- An embedded map, video or chat widget that loads a third-party script
What it has to contain
Who you are and how to reach you, every category of data collected, the purpose and lawful basis for each, every third party that receives it, how long you keep it, and how someone accesses, corrects, deletes or objects — plus how to complain to a regulator.
Why a template on its own is a risk
Templates describe a generic business. If yours claims advertising cookies you do not set, or omits the chat widget installed last year, it is inaccurate — and an inaccurate policy is a worse position than a short honest one. Audit the site first, then write it.
The commercial reason, separate from the legal one
Google Ads, Merchant Center and most payment processors require a published privacy policy alongside contact details and terms. Without one, whole sales channels are closed to you regardless of how good the site is.
The longer version
This answer is deliberately short. If you want the full treatment, Buying a website: the questions that decide what you actually own covers it in about 5 minutes — free, ungated, written from client work.
Who answered this
Anas Bin Masud builds e-commerce sites and does technical SEO for businesses in the UK, Canada and Pakistan — fifteen live client sites, six of them stores taking real payments. These answers come from those projects rather than from a content brief. More about how I work, or ask me something directly.