Do You Really Need a Privacy Policy on Your Website?

I get asked all the time from my design clients if they need a Privacy Policy on their website. Some of them thought it was mainly for show or just to look more professional. They sometimes believed there’s no legal implications involved with having a website. The truth is, you could be breaking federal law if you don’t have a Privacy Policy. Yep! It’s one of the most critical elements when launching your website.

Could You Be Breaking Federal Law?

There are so many data privacy regulations that not having one can cause significant legal issues and fines. As a small business owner, none of us can afford to pay thousands of dollars just for this type of mistake. I suggest saving yourself a headache and getting one before it’s too late!

Disclaimer: The information provided on this page is for general informational purposes only and does not constitute legal advice. We strongly recommend consulting with an attorney for any questions regarding your specific legal needs. Create with Danielle is not liable for any losses or damages related to actions or failure to act related to the content on this website. I always recommend looking at their website and information to see if it’s right for your business type before making your purchase. This post also includes affiliate links. If you go through them to make a purchase, I will earn a commission. Keep in mind that I only share about companies that I genuinely believe in and use myself! For my details on affiliate links, please visit my terms of use.

Why Do I Need a Privacy Policy? 

A Privacy Policy explains the personal information you collect from visitors and what you do with that data. If you’re collecting visitor data from your website, you must disclose this on your website. Visitors take their privacy seriously and sometimes want to know how you’re using it. It is illegal not to disclose this information, and you may lose leads/sales because they cannot trust your business/website.

If you have any tool that collects personal information on your website, you need one right away. It can include analytics, payment processing, contact forms, chat widgets, newsletter, etc. Here are some regulations that require a Privacy Policy. These are constantly changing and many more privacy acts could’ve gotten into effect since this post:

• GDPR: General Data Protection Regulation
• CalOPPA: California Online Privacy Protection Act
• PIPEDA: The Personal Information Protection and Electronic Documents Act
• COPPA: Children’s Online Privacy Protection Rule

All sounds scary, right? When you’re starting a new business, these are the last things that you think about, which is why they end up forgotten. By not following these regulations, there are hefty fines. Laws around the world require you to have a Privacy Policy that it’s hard to keep up. 

Some people have told me, “I’m located in the United States and don’t have European clients, so I don’t need a GDPR compliant privacy policy” when that is false! It’s not just about the laws about your specific location, but about your visitor’s location. If your website is accessible for anyone in the world to view, you need to follow all the laws. They could easily stumble across your website, and you don’t even know it. 

What is GDPR Compliance?

GDPR stands for General Data Protection Regulation, which was set by the European Union. When starting my business, I found this to be pretty stressful as they seem to have the strictest laws surrounding data privacy. If you collect data from any citizens in the European Union’s 28 countries, you need to comply with their new rules. 

When looking for a Privacy Policy either from online or from a lawyer, you have to make sure it’s GDPR compliant. Not following theirs can be fined up to €20 million. Most fines given so far have been pretty small, but it’s better to get a privacy policy and not worry about it. 

What Should I Include in My Policy?

This will vary depending on your type of business and what you data you plan to collect. Some basics would include:

• Your contact information
• What data you collect and what you do with it
• Who else gets access to this data (e.g. Google Analytics and Payment Processors)
• Visitors’ rights under GDPR, CalOPPA, Children’s Act, and more.

So, How Do I Get a Privacy Policy? 

It all depends on you and the type of business you have. You can get a privacy policy custom drafted by a lawyer or use a premade template. The Contract Shop is my favourite! This is what I use myself & recommend to all of my clients. This shop is excellent to make sure you’re protected when you’re starting, without breaking the bank. It’s the perfect solution for small business owners with a smaller budget!

They offer a GDPR compliant policy that also complies with other regulations. What I love most about The Contract Shop are the updates! If there is an update/change in any laws, Christina will send you an email on where to edit your policy and ensures you are always protected. You download the file, fill in the blanks & breathe a sigh of relief! No legal knowledge required.

Get a Privacy Policy & Terms of Use Bundle

Get my recommendaded templates from The Contract Shop right here.

Feel Protected?

I hope this post gave you clarity if you weren’t aware of how serious it is to have one on your website. Stay protected & feel confident that you’re following all the laws!