If your website has a contact form, an email signup, analytics, or cookies of any kind, you legally need a privacy policy. Most small businesses either don't have one or copied one from a random website in 2019 and never updated it.
Why It Matters
Legal Requirement
Federal and state laws (CCPA in California, various state privacy laws, COPPA for children's data) require businesses that collect personal information to disclose how they use it. A contact form that asks for name, email, and phone number is collecting personal information.
Google Trust Signal
Google's quality rater guidelines look for evidence of trustworthiness. A privacy policy is one of those signals. Sites without one can be perceived as less trustworthy, which affects search ranking — especially for YMYL (Your Money or Your Life) content like medical, legal, and financial services.
AI Search Trust
AI systems evaluating websites for citation consider trust signals. A privacy policy, terms of service, and clear business information contribute to entity trustworthiness in knowledge graphs.
What Your Privacy Policy Should Cover
- What information you collect. Name, email, phone, IP address, cookies, analytics data.
- How you collect it. Contact forms, email signups, cookies, Google Analytics.
- Why you collect it. To respond to inquiries, provide services, improve your website.
- Who you share it with. Third parties: email service providers, analytics tools, payment processors.
- How you protect it. SSL encryption, secure storage, access controls.
- User rights. How someone can request their data be deleted or modified.
- Cookie policy. What cookies your site uses and why.
- Contact information. How to reach you with privacy concerns.
What It Shouldn't Be
- A copy-paste from another site. Your privacy policy should reflect YOUR actual practices, not a generic template.
- Written in impenetrable legalese. Plain English is better for users and better for trust.
- Buried and impossible to find. Link it in your footer on every page.
The Bindingstone Approach
Every Bindingstone website includes a privacy policy and terms of service tailored to the business type — healthcare practices get HIPAA-relevant language, e-commerce gets transaction-relevant language, and service businesses get contact-form-relevant language. It's linked in the footer, written in plain English, and kept current. Start your free trial.
Ready for a Floor That Lasts?
We Build, Host, and Run the Website. You Run the Business.