Website policies
UK Website Legal Pages: Privacy, Cookies & T&Cs
Your website might be beautiful, bold and bursting with personality, but is it legally covered too?
When I’m browsing websites, I often come across businesses without the appropriate legal policies in place. It’s an easy thing to overlook, especially when you’re busy perfecting your branding, booking system and latest offer, but it can leave your business more vulnerable than you might realise.
If your website collects personal data, uses cookies, takes bookings or sells services, you’ll need clear legal pages that explain what visitors can expect. They might not be the most glamorous pages on your website, but they play an important role in protecting your business and building trust with visitors.
In this blog, I’m breaking down the main legal pages UK businesses may need, what each one does and why they deserve a place on your website.
Disclaimer: I’m not a legal professional, and this content is intended for general information only, NOT legal advice. If you need advice about your specific business situation, please speak to a qualified legal professional.
This post includes affiliate links. I only recommend products I’ve personally used and genuinely believe may be useful.
Privacy Policy
What is it?
A privacy policy explains what personal information your business collects, why you collect it, what you do with it and who you share it with.
This may include:
A visitor’s name
Email address
Phone number
IP address
Information submitted through a contact form
Details provided when someone books or purchases from you
Why is it important?
If your website collects or processes personal data, you need to be transparent about how that information is handled.
A privacy policy helps explain your data practices and supports your responsibilities under UK data protection law, including the UK GDPR and the Data Protection Act 2018.
It can also reassure visitors that their information is being handled responsibly. Clear information builds trust and may make people more comfortable enquiring, subscribing or buying from you.
Whose responsibility is it?
Although the privacy policy sits on the website, it is the business owner’s responsibility to ensure it is accurate and suitable for the business.
A web designer or developer can add the page, format it and link to it, but they should not be expected to create legal wording based on information they may not know.
Privacy policies depend on the individual business, including:
What information it collects.
Why it collects the information.
Which software and tools it uses.
How long it keeps the information.
Who it shares information with.
Where can you get one?
For the most tailored approach, a solicitor can draft your privacy policy and offer legal advice based on your specific business. This may be the best option for larger businesses or those with more complex compliance needs.
For smaller businesses, a policy generator such as Termageddon can be a much simpler and more affordable option.
If sorting out your website’s legal pages has been sitting firmly on your “I’ll deal with that later” list, let me introduce you to Termageddon.
It’s my go-to for creating policies. I use it in my own business and, honestly, it gives me one less thing to worry about. You complete the form once, Termageddon creates your policies, and they can automatically update when the law changes. Very handy, very reassuring and much less stressful than attempting to write everything from scratch.
You can check out Termageddon here, and use the code BASC at checkout to get 10% off your first year.
*This is an affiliate link, which means I may earn a commission if you make a purchase. I only recommend Termageddon because I use it myself.*
Cookie policy
What is it?
Cookies are small files or pieces of information that can help a website:
Remember visitor preferences.
Keep certain functions working.
Remember what is in a shopping basket.
Maintain a login session.
Understand how visitors use the website.
Support embedded content and marketing tools.
For example, cookies may help remember light or dark mode, keep items in a shopping basket or support website analytics.
Why does it matter?
Visitors should be told when cookies are being used and what they do.
Depending on the type of cookie, you may also need consent before placing or accessing it. Non-essential analytics, advertising and marketing cookies should not simply load before a visitor has made a meaningful choice.
A cookie banner should make it easy for visitors to:
Accept all cookies.
Reject all optional cookies.
Manage their preferences.
Understand which cookies are necessary.
The information should be clear and easy to find rather than hidden inside a general terms and conditions page.
Whose responsibility is it?
The business owner is responsible for identifying the cookies used on the website and ensuring that the cookie policy and consent settings are accurate.
A designer can implement the cookie banner and policy page, but the business needs to provide the correct information.
A cookie-management or policy tool may help, but it still needs to be configured properly. This is especially important if the website uses:
Google Analytics.
Advertising pixels.
Booking systems.
Payment tools.
Embedded videos.
Email marketing platforms.
Other third-party services.
Terms and conditions
What are they?
Terms and conditions set out the rules for using your website or buying your products and services. They explain what visitors or customers can expect and what is expected from them.
What can they cover?
Terms and conditions may include:
Payments and pricing.
Bookings, cancellations and refunds.
Delivery or service timescales.
Acceptable use of the website.
Copyright and intellectual property.
Limitations of responsibility and liability.
How disputes or complaints will be handled.
Why are they important?
Clear terms help everyone understand what is happening before a customer makes an enquiry, booking or purchase. They can reduce misunderstandings and help protect the business if something goes wrong. However, they need to be fair, accurate and appropriate to the business. They are not a magic shield against every possible legal problem.
Disclaimer
What is it?
A disclaimer clarifies the purpose and limits of information on your website. For example, if you publish general business, health, financial or legal information, a disclaimer can explain that the content is for general information only and is not a substitute for advice from a suitably qualified professional.
Why is it important?
A disclaimer helps prevent visitors from treating general information as personalised advice. It also sets clear expectations about what your content can and cannot do. However, a disclaimer is not a magic shield and cannot automatically remove every legal responsibility. It should be accurate, fair and relevant to the information your website provides.
Quick website checklist
Before launching your website, check whether you have:
Added a privacy policy if your website processes personal data.
Checked which cookies and third-party tools your website uses.
Given visitors a genuine choice about optional cookies where consent is required.
Used a disclaimer where your website provides general information that could be mistaken for professional advice.
Linked your legal pages clearly in the website footer.
Added links near relevant forms, booking pages or checkout areas.
Reviewed your documents whenever your services, tools, suppliers or data practices change.
Legal pages may not be the most exciting part of a website, but they are an important part of running a professional online business. They help visitors understand how your website works, support trust and make expectations clearer from the start.
Your web designer/developer can help you present these pages clearly and make them easy to find, but the business owner remains responsible for ensuring that the information is accurate. If you are unsure what your business needs, speak to a solicitor or qualified legal adviser, or consider using a reputable policy service for a starting point.
This blog is for general information only and is not legal advice.
Thanks for reading!
Sources you can read from:
Termageddon - Why use policies
What privacy information should we provide?