Website Policies: Which Ones Does Your Site Actually Need?

Launching a website comes with a list of legal pages people tell you to add: privacy policy, terms, cookie notice, disclaimer, refund policy, accessibility statement. Not every site needs every one. The website policies you need depend on what your site does, what data it collects, whether you sell anything, and where your visitors are located.

This guide explains the common policies, what each is for, and which are typically relevant for different kinds of websites. Use it to make a short list, then check the specific requirements for your situation.

This article is general information, not legal advice.

The common policies at a glance

Policy	Main purpose	Often relevant when
Privacy policy	Explains how you handle personal data	You collect any personal information, including via analytics
Terms of service	Sets rules and contract terms for users	You have accounts, sales, user content or significant risk
Cookie notice or policy	Explains cookies and choices	You use non-essential cookies, especially with EU or UK visitors
Refund or returns policy	Explains cancellations and refunds	You sell products or services
Shipping policy	Explains delivery terms	You ship physical goods
Disclaimer	Limits reliance on content	You publish advice-like information or affiliate links
Accessibility statement	Describes accessibility efforts	You want to communicate commitments or are required to
State privacy notices	Specific disclosures under US state laws	You meet thresholds of laws like California's

By type of website

Personal blog or portfolio

If you use analytics, comments, a newsletter or contact form, you likely collect personal data and should have a privacy policy. A cookie notice may be needed depending on your tools and audience. If you use affiliate links, disclose them clearly near the links; the US Federal Trade Commission's guidance on endorsements and disclosures for influencers explains the principle.

Local service business

A site with a contact or booking form collects names, emails and phone numbers, so a privacy policy is usually appropriate. Simple terms can clarify how bookings, cancellations and quotes work. If you take deposits or payments online, add a refund or cancellation policy.

Online store

Typically needs a privacy policy, terms and conditions, shipping policy, returns and refunds policy, and a cookie notice if you use non-essential cookies. Depending on your markets, you may also need specific consumer rights information or state privacy notices.

SaaS or app

Usually needs terms of service, a privacy policy, a cookie notice for the marketing site, refund and cancellation terms, and possibly an acceptable use policy and data processing agreement for business customers. App stores require a privacy policy link.

Membership site or online course

Terms covering access, content licences, renewals and cancellations; a privacy policy; refund terms; and a cookie notice where needed.

Community, forum or marketplace

Detailed terms covering user conduct, content ownership, moderation and disputes between users, plus a privacy policy and cookie notice. Marketplaces may need additional policies for sellers.

Factors that change the answer

• Visitor location: EU, UK, California and other regions have laws with specific requirements.
• Business size and activities: some laws apply only above certain revenue or data volume thresholds.
• Sensitive data: health, financial, children's or biometric data often triggers stricter rules.
• Third-party requirements: payment processors, ad networks and app stores have their own policy requirements.
• Industry rules: regulated sectors may need specific disclosures.

Platform and payment provider requirements

Legal rules are only part of the picture. Payment processors, ad networks, app stores and social login providers often require you to publish certain policies as a condition of using their services. An app store may reject an app without a privacy policy link; a payment provider may expect visible refund and contact information. Check the developer or merchant terms of every platform you rely on, since missing a required page can lead to a suspended account.

Disclaimers in more detail

A disclaimer clarifies how readers should treat your content: for example, that articles are general information, that results vary, or that you earn commissions from some links. Disclaimers cannot override consumer rights or excuse misleading claims, but they set honest expectations.

Where to display policies

Footer links on every page are standard. Also link the relevant policy at the point of collection or decision: the privacy policy near forms, the terms at sign-up and checkout, refund terms near the buy button.

Avoiding policy sprawl

More documents are not automatically better. Each policy must be accurate and maintained. A short, correct privacy policy beats five out-of-date pages copied from templates. Start with what you need, then add documents as your site grows.

Keeping them accurate

Review policies when you add new tools, start selling, enter new markets or change how you use data. Record changes and update the "last updated" date.

Getting the core set in place

Policy Monster covers four of the most common documents, namely a privacy policy, terms, a CCPA notice and a refund policy, generated from a questionnaire and hosted at a stable URL that updates when the law changes. Other items on this list, such as shipping policies or accessibility statements, would come from elsewhere. Plans are listed in the pricing section.

FAQ

Does every website need a privacy policy?

Not every site in every country is legally required to have one, but most websites collect some personal data through analytics, forms or cookies, which often triggers a requirement under privacy laws. Many service providers also require it. Publishing an accurate privacy policy is a sensible default for nearly any site that interacts with visitors.

Do I need terms of service for a simple website?

A brochure site with no accounts or sales may not strictly need terms, but simple terms of use can still help by setting expectations about content use, liability limits and governing law. Once you sell products, offer accounts or host user content, terms become much more important.

What is the minimum set of policies for an online store?

Most online stores publish at least a privacy policy, terms and conditions, a shipping policy and a returns and refunds policy, plus a cookie notice where required. Depending on location and products, additional disclosures may apply. Make sure each is accurate and easy to find before customers buy.