Do small businesses really need a privacy policy?

Yes, if your site collects any personal data, including through a contact form, newsletter sign-up or analytics. Privacy laws in India, the EU, UK, US states, Canada and Australia all expect you to explain what you collect and why. Google Ads and Meta also require one.

What's the difference between required and recommended?

Required items are expected by law, a regulator or your payment gateway for a business like yours. Recommended items are strong best practice, or become required once you pass a size threshold we can't check, such as the CCPA's revenue limit.

My business is in India but sells worldwide. Which rules apply?

Indian law applies to you, and foreign laws can apply to the customers you target. For example, GDPR applies if you offer goods or services to people in the EU. Run the checklist for India, then again for your main export markets.

Legal Pages Checklist · Legal pages

Which Legal Pages Does My Website Need? Free Checklist

Pick your business and country to see every legal page and disclosure your website needs.

100% free
No sign-up
Runs in your browser

Tell us about your business

Where you do business

Type of business

What does your website do?

Collects personal data (forms, bookings, sign-ups)Uses analytics or tracking cookiesRuns ads, pixels or remarketingTakes online payments or donationsShips physical productsSells subscriptions / auto-renewing plansHas user accounts or loginsAimed at children or used by themUses affiliate links or sponsored content

Required

Recommended

Pages to publish

Required

7 items

Expected by law, a regulator or your payment gateway.

Privacy policy
You collect personal data (forms, analytics, bookings or payments), so you must explain what you collect, why, who you share it with, how long you keep it and how people can reach you. Google Ads, AdSense and Meta also require one.
DPDP Act 2023 & DPDP Rules 2025; IT (SPDI) Rules 2011, rule 4Generate it free
Refund & cancellation policy
Customers must be able to read your return, refund, exchange and cancellation terms before they buy. Payment gateways (Razorpay, Stripe, PayU, PayPal, Cashfree) also check for it before activating or keeping your account.
Consumer Protection (E-Commerce) Rules 2020Generate it free
Grievance officer name & contact
Indian law requires a named grievance officer (or data protection contact) whose details are on your website, with their designation. Complaints must be acknowledged within 48 hours and resolved within a month.
Consumer Protection (E-Commerce) Rules 2020, rule 4; IT (SPDI) Rules 2011, rule 5(9); DPDP Act 2023 s.8(9)Generate it free
Terms & conditions
Your terms are the contract with visitors and customers: pricing, payment, acceptable use, liability limits and which courts decide disputes. Payment gateways (Razorpay, Stripe, PayU, PayPal, Cashfree) also check for it before activating or keeping your account.
Consumer Protection (E-Commerce) Rules 2020Generate it free
Shipping & delivery policy
Say how long orders take to dispatch and arrive, what shipping costs, where you deliver and what happens if a parcel is late, lost or damaged. Payment gateways (Razorpay, Stripe, PayU, PayPal, Cashfree) also check for it before activating or keeping your account.
Consumer Protection (E-Commerce) Rules 2020Generate it free
Contact us page
E-commerce sites must show their legal name, address and customer-care contact.
Consumer Protection (E-Commerce) Rules 2020, rule 4Generate it free
Published business address & email
A real postal address and email address (not just a form) build trust and are expected by consumer law and payment providers.
Generate it free

Cookie consent banner
The DPDP Act requires free, specific and informed consent for processing personal data. A consent banner for non-essential cookies is the safest way to show it.
DPDP Act 2023 s.6Generate it free
“Last updated” date on privacy policy
A visible date shows the policy is maintained. Review it at least once a year.
Generate it free
Cookie information (policy or privacy section)
List the cookies and trackers you use, what each one does, how long it lasts and how to change consent.
Generate it free
About us page
Tells visitors and Google who is behind the site, a key trust (E-E-A-T) signal. Payment gateways review it too.
Generate it free
Legal name, address & GSTIN
Show who is selling: your legal name, address and GSTIN (and each seller's details if you run a marketplace).
Consumer Protection (E-Commerce) Rules 2020Generate it free
Governing law & courts in terms
Stating which country's law applies and where disputes are heard avoids an expensive fight about it later.
Generate it free
Refund timeframes
Say how many days customers have to ask, and how many days a refund takes to reach them.
Generate it free
Delivery timeframes
Concrete dispatch and delivery times cut “where is my order?” tickets and chargebacks.
Generate it free

Already have a website? Run the free Legal Page Checker to see which of these your live site already covers.

Generated in your browser; nothing you type is sent to us. This is a starting template based on common legal requirements, not legal advice. Laws change and every business is different, so have a qualified lawyer review it for your situation.

Published it? Check your live legal pages

How it works

How to use Legal Pages Checklist

Choose where you do business and your type of business.

Switch on what your website does: payments, ads, shipping, subscriptions…

Work through the required items, then the recommended ones.

About

About this tool

Different businesses need different legal pages. This checklist asks what kind of business you run, where you trade, and what your website does, such as taking payments, running ads, shipping products or offering subscriptions. It then lists every page and disclosure you need, split into what's required by law or payment gateways and what's recommended best practice.

It covers India (DPDP Act, IT Rules, Consumer Protection E-Commerce Rules), the US (CalOPPA, CCPA and state privacy laws, COPPA, FTC rules), the UK and EU (GDPR, PECR and the ePrivacy Directive, consumer contract rules), Canada (PIPEDA and Quebec's Law 25) and Australia (the Privacy Act and Australian Consumer Law). It also adds industry rules, like RERA numbers for Indian real estate, FSSAI licences for food, and the medical, financial and legal disclaimers.

Each item explains in plain English why you need it and links to a free generator. Download the checklist as a file to tick off as you go, or run the Legal Page Checker once your site is live.

Frequently asked questions

Free proposal

Want a hand growing online? Get a free, no-obligation proposal from the T3 team.

No obligation. A real strategist replies within 24 hours.

Keep going

More free tools

All free tools

LegalCheckT3NewScan any site's privacy, terms, refund, cookie and contact pages against your industry's rules.Privacy Policy GeneratorPopularCreate a privacy policy for India, the US, UK, EU, Canada or Australia in minutes.Terms & Conditions GeneratorNewGenerate terms and conditions for your website, online store, SaaS or service business.LaunchT3NewEvery registration, licence and document you need to open, for your country and industry.

Done-for-you

Let's grow your business online

Free tools show you the problem. The T3 team fixes it, with a clear plan and pricing up front.

Talk to us Run a free website audit