Why small websites need legal pages now
Small sites need legal pages now for three reasons. Privacy laws (Europe’s GDPR and a growing list of US state laws) define “personal data” broadly enough to cover analytics and email forms. The services you rely on, such as Stripe, PayPal, Google AdSense, Meta ads, app stores and email platforms, require a posted privacy policy in their contracts. And courts enforce clearly posted terms that limit liability, protect your content and set the rules for disputes. The pack writes each page to match your site.
- The privacy policy says what’s true. It covers what you collect (analytics, cookies, form data, accounts, and payment details, which your payment provider processes and you don’t store), why you collect it, who handles it (processors such as your email and analytics tools), how long you keep it, and how people can contact you about it. Accuracy matters more than anything else here: a policy that promises more than you do is worse than none.
- The terms set the rules. Your content belongs to you, users may not misuse the site, the service is provided as-is with liability capped, and disputes go to a set venue. Stores also get order, pricing-error and shipping terms. SaaS products get account, termination and subscription terms.
- The refund policy is your first chargeback defense. Make it clear and easy to find, because card networks check whether the policy was disclosed before the purchase.
Do GDPR and the state privacy laws apply to me?
On paper, most US state privacy laws only apply above volume thresholds (commonly 25,000 to 100,000 or more residents per year, and a few states, such as Texas, use a small-business test instead) that small sites don’t reach, and GDPR applies when you target or monitor people in Europe. In practice the baseline is the same everywhere: say truthfully what you collect and what you do with it. Your vendors require that regardless, and a policy written to that standard won’t need rewriting as you grow. The playbook’s decision guide goes through each law in plain English.
Website Legal Pack provides self-help templates and general information. It is not legal advice, and it is not a substitute for the advice of an attorney. Kits For That is not a law firm. Privacy and consumer laws vary by jurisdiction and change quickly. If you work in a regulated industry (health, finance, children’s services) or your business is focused on the EU, have a lawyer review your final pages. Facts verified July 2026.