How to draft website terms and privacy policy

To protect your business online, you must have two clear legal documents on your website: a Privacy Policy to satisfy UK GDPR requirements and Terms and Conditions to set the rules for using your site. The most efficient way to do this is to use a reputable UK-based legal template or an online generator, then customise it to reflect how your home staging business handles data and website visitors.

The Privacy Policy: Staying GDPR Compliant

As a business owner in the UK, you are legally required to tell people how you collect and use their personal information. This is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Even if you only have a simple contact form, you are collecting personal data.

Your Privacy Policy should clearly state:

• Identity: Who you are and how to contact you.
• Data Collection: What information you collect (e.g., names, email addresses, cookies).
• Purpose: Why you need this data (e.g., to send quotes or respond to enquiries).
• Storage: How long you keep the data and how you keep it secure.
• Rights: That users have the right to see their data or ask for it to be deleted.

Note: Most small businesses also need to register with the Information Commissioner’s Office (ICO) and pay a small annual data protection fee.

Terms and Conditions: Protecting Your Content

While a Privacy Policy is about the user, the Terms and Conditions (T&Cs) are about protecting you. For a home staging business, this document is vital for protecting your intellectual property, such as the high-quality photos of your staged rooms.

Key areas to cover include:

• Copyright: Stating that all images, text, and logos on the site belong to your business.
• Liability: Limiting your responsibility for errors on the website or technical issues.
• Governing Law: Stating that any legal disputes will be handled under the laws of England and Wales (or Scotland/Northern Ireland).
• Acceptable Use: Prohibiting visitors from using your site for anything illegal or harmful.

Which document does what?

Steps to get it done

1. Identify Data Points: List everywhere your site collects info (e.g., newsletter sign-ups, contact forms, Google Analytics).
2. Use a Template: Look for UK-specific templates. Avoid using US versions, as they often reference different laws.
3. Customise: Ensure your business name, address, and specific contact details are accurate.
4. Make it Visible: Place links to both documents in your website footer so they appear on every page.

Pro Tip: Don't just copy and paste from a competitor. Their terms might not be legally sound, or they might include clauses that don't apply to your specific way of working. Using a professional template service is a low-cost way to get peace of mind.