This guide covers “privacy policy page” in plain language. If your website collects any personal information, such as contact form messages, analytics data or orders, you generally need a privacy policy. WordPress includes a tool that helps you start. This guide shows how, but it is general information and not legal advice, so have a professional review your final policy.
Why you need one
- Laws in many places require disclosure of what data you collect and why.
- Ad networks, analytics tools and payment providers often require a policy.
- It builds trust with visitors.
Step 1: Use WordPress’s built-in tool
- Go to Settings, then Privacy.
- Click Create new page, or choose an existing page.
- WordPress generates a draft with suggested text and sections.
- Open the page and edit it.
Step 2: Review the policy guide
On the Privacy screen, open Policy Guide. It lists text suggestions from WordPress core and your active plugins, such as forms and analytics.
Step 3: Make it accurate
Describe what your site actually does. Typical topics include:
- What information you collect (contact forms, comments, orders, analytics)
- Why you collect it
- Cookies and tracking technologies
- Third-party services (payment processors, email, analytics, ads)
- How long you keep data
- How visitors can request access or deletion
- How to contact you
Step 4: Publish and link it
- Add it to your footer menu so it appears on every page.
- Link it near forms and checkout.
- Link it in your cookie notice, if you use one.
Cookie notices and consent
Some regions require consent before non-essential cookies or tracking. A consent management plugin can help. Rules vary by country and state, so check the laws that apply to you.
Keep it updated
Review the policy when you add forms, analytics, ads, a store or new third-party tools.
Get it reviewed
AI tools and generators can draft policies, but a lawyer should review the final version, especially for stores, health, finance or children’s services.
Related: adding a contact form and the beginner’s WordPress guide.
Privacy policy page FAQ
Do small sites need a privacy policy?
If you collect any personal data, even through a contact form or analytics, you generally should.
Can I copy another site’s policy?
No. Copying can be inaccurate and may infringe copyright. Write one that matches your practices.