Privacy Policy for Small Businesses

A realistic scope for a small business

A local business site usually collects far less than it thinks: a contact form, maybe a booking tool, a mailing list, and analytics. The policy should be short and specific about those four things rather than reciting clauses copied from a global platform. Naming the actual tools — a form provider, a booking system, an email service — is what makes it credible.

• Contact and enquiry forms, and how long you keep enquiries
• Bookings, quotes or invoices
• Mailing list consent and unsubscribe route
• Analytics and any advertising pixel
• Who to email to request access or deletion

The obligations that catch small operators out

Two are worth planning for. First, if you serve customers in the EU or UK you need a lawful basis for marketing email and a working unsubscribe. Second, if you take card payments online your processor's terms typically require a published policy. Neither is expensive to satisfy, but both need the policy to be reachable from every page — a footer link is the norm.