Legal Pages Every Business Website Needs: A General Guide
A general overview of the legal pages most business websites need: privacy policy, terms, imprint, cookie information and shop policies. Not legal advice.
Most business owners dread legal pages. They look like boilerplate nobody reads, and copying a policy from another site feels like an easy shortcut. But these pages do real work: they explain what you do with visitors' data, set the terms of your relationship with customers and, in many countries, they are required by law. This article is a general overview, not legal advice. Requirements differ by country and by business type, so confirm the details with a qualified professional.
Privacy policy
If your site collects any personal data, you will almost certainly need a privacy policy, and in the European Union and the UK, data protection law (GDPR and its UK equivalent) requires you to give people certain information at the time you collect their data. Personal data includes names, email addresses and, depending on context, IP addresses and online identifiers collected by analytics or advertising tools. A useful policy tells people, in plain language:
- Who you are and how to contact you (and a data protection officer if you have one).
- What data you collect and why, for each purpose such as contact forms, orders, newsletters or analytics.
- The legal basis you rely on for each purpose.
- Who you share data with, such as payment providers, email services or analytics tools.
- Whether data leaves your country or region and the safeguards used.
- How long you keep data.
- Their rights: access, correction, deletion, objection, and complaint to a regulator.
The policy must describe what you actually do. Audit your forms and plugins first, then write.
Imprint or company information
Several European countries require commercial websites to show provider identification, often called an imprint, with the legal entity name, address, contact details, registration numbers and VAT ID. The rules are specific, and failing to comply can be penalised. Even where it is not mandatory, publishing clear company details builds trust. Place the link in the footer where it is easy to find from every page.
Terms and conditions
If you sell products or services online, terms of sale set out ordering, prices, payment, delivery, cancellation, warranties and liability. For consumers, local laws often override anything you write; for example, EU consumer rules include withdrawal rights for many distance sales, and you must provide certain information before the order. For business-to-business services, terms can be more flexible but should still be clear. Use the terms to manage expectations, and make sure customers see and accept them in a way you can later prove, such as an unticked checkbox at checkout.
Cookie information
If your site stores or reads information on a visitor's device for anything beyond strictly necessary functions, rules in Europe typically require informing visitors and obtaining consent first for analytics or advertising cookies. A cookie policy lists the cookies and similar technologies in use, their purpose and their duration. Our article on cookie banners and analytics consent basics covers the practical side.
Shop-specific pages
| Page | Typical content |
|---|---|
| Delivery information | Countries served, carriers, times, costs |
| Returns and refunds | Time limits, condition, who pays shipping, how refunds are issued |
| Warranty information | Statutory rights and any additional guarantee |
| Payment information | Accepted methods and when you charge them |
| Contact details | Ways to reach you for complaints and questions |
Other situations
- Accessibility statement: required for some organisations in some countries; useful for others.
- Disclaimers: for professional advice or health content, a clear note about the limits of the information.
- Affiliate or sponsored content disclosure: if you earn commission from links, advertising rules usually require clear disclosure.
- Copyright and image licences: keep proof that you may use the images and fonts on your site.
Templates, generators and lawyers
Templates and generators can provide a starting point, but they do not know your business. A generic policy that lists tools you do not use, or omits the ones you do, can be worse than none. A sensible approach: draft using a reputable template, adapt it to your real processes, and have a solicitor or a specialised service review it, especially if you process sensitive data, sell to consumers across borders or operate in a regulated field.
Keep the pages up to date
- Review legal pages whenever you add a tool, form, plugin or payment provider.
- Put a "last updated" date on each page.
- Keep older versions of terms for orders placed under them.
- Reassess after changes in your business, such as starting to ship abroad.
Where to place the links
Put legal links in the footer of every page, so visitors can reach them from anywhere. In a shop, also link terms and returns information near the checkout button, and make sure forms that collect data link to the privacy policy at the point of collection. Search engines and users both expect this layout, and having it consistent makes audits easier.
Hosting and the technical side of compliance
Legal compliance includes keeping data secure. Use HTTPS, update software and back up regularly. Zebra Hosting is based in Europe and includes free SSL, but your legal obligations depend on your own business, so seek advice for those. Review the security page for how to protect your site, and use the contact page if you have questions about the hosting side of your setup.
