When you need one
If your site collects any personal data, like names and emails from a contact form, analytics data or ad tracking, you almost certainly need a privacy policy. Laws like GDPR and several US state privacy laws require one, and ad platforms and app stores often do too.
What it should cover
What data you collect, how you collect it, why you use it, who you share it with, like analytics or email providers, how long you keep it, how you protect it and how people can ask to see or delete their information.
Keep it accurate
The policy has to match what your site really does. If you add a new tracking tool, chat widget or email platform, update the policy to reflect it.
Why Privacy Policy matters
A clear privacy policy builds trust and is often a legal requirement. Missing or inaccurate policies can create legal risk, get ad accounts flagged and make visitors hesitate before filling out a form.
The policy that didn't match the site
A small online store used a free template privacy policy that never mentioned its ad pixels or email platform. After an ad review flagged it, the store rewrote the policy to list its real tools and data uses, and linked it clearly from every form.
Common mistakes
Copying another site's policy
A borrowed policy rarely matches your tools and practices. Write one that reflects what your site actually does, and get legal advice for your situation.
Hiding the link
Link the policy in your footer and near forms that collect personal details.
Never updating it
New tools and new laws change what you need to disclose. Review the policy at least once a year.
Where we work on this