Complete guide

Legal pages for a small business website: what you need and why

Even a simple website for a restaurant, salon or shop needs a few legal pages. This guide explains the four that matter (legal notice, privacy policy, cookie notice and terms), what the EU, UK and US rules say, and gives you a template to adapt.

Updated 10 min read By the Voxtya team

Which legal pages does my small business website need?

Quick answer: most small business websites need four things. A legal notice (also called an imprint) saying who runs the site and how to contact you; a privacy policy as soon as you collect any personal data, even through a contact or booking form; a cookie notice with a real choice if you use non-essential cookies; and terms if you sell online or take bookings with conditions. Link to them from the footer of every page. The exact rules depend on your country, so check with a local adviser.

Legal pages are not just paperwork. They tell customers who they are dealing with, what happens to their details and what to expect if something goes wrong. A clear, honest footer is also a quiet trust signal: people are more comfortable booking with a business that is easy to identify.

This guide covers the general principles in the European Union, the United Kingdom and the United States. It is not legal advice: rules vary between countries (and between US states), and regulated trades often have extra requirements. Use it to know what to ask and what to prepare.

Free tool, no sign-up

Check your business’s visibility

A free check of your online presence: Google profile, website and reviews. A good moment to review your legal pages too.

Run the free check

Where should the legal pages appear on my site?

Visitors should reach every legal page in one click, from any page. The usual place is the footer, with plain names: “Legal notice”, “Privacy policy”, “Cookies” if you have a separate page, and “Terms” if you sell online. Avoid hiding them in a menu called “More” or in a PDF.

Think about every page that carries your name, not just the home page:

  • your booking page, especially if it sits on a separate address provided by your booking tool;
  • your online menu reached by QR code, which customers open on their phone at the table;
  • a landing page for an event or a seasonal offer;
  • the forms themselves: a short line under each form, with a link to the privacy policy, is clearer than a policy nobody opens.

On social media profiles, the platform’s own terms apply, but put your full business details and a link to your website in your profile so customers can find your legal pages easily.

Do I need a privacy policy if I only have a contact form?

Yes, in the EU and UK. A contact form, a booking form, a newsletter sign-up or a review form all collect personal data, and the GDPR (and UK GDPR) requires you to tell people what you do with it at the moment you collect it.

The European Commission’s GDPR guidance lists what to include:

What to sayExample for a restaurant
Who you are and how to contact you[Business name], [address], [email]
Why you use the data, and on what legal basisTo manage your booking (to carry out your request)
Which dataName, phone, email, party size, notes you add
Who receives itOur team and our booking software provider
Whether it leaves the EUSay so if a provider stores it outside the EU
How long you keep itThe period you have set, for example after the last visit
People’s rights, including complaining to the regulatorAccess, correction, deletion; complain to your data protection authority
Right to withdraw consentFor newsletters: unsubscribe at any time

The guidance asks for concise, clear and plain language. The UK regulator, the ICO, says the same in its guidance on the right to be informed.

In the US, privacy rules come from federal agencies and from state laws, and they vary. One principle is constant: the FTC expects businesses to honour the promises in their privacy policy, so only write what you actually do. Our GDPR guide for small businesses goes further on data, retention and customer requests.

Do I need a cookie banner?

Only if your site uses cookies or similar trackers that are not strictly necessary. In the UK, the ICO’s guidance on cookies says you must give clear information and get consent through a clear, positive action; simply continuing to browse does not count. The exception is cookies essential to provide the service the visitor asked for (keeping items in a basket, for example). EU countries apply similar rules; in France, the official guidance adds that refusing must be as easy as accepting.

In practice:

  • list the cookies and tools your site uses (ask your website provider);
  • if you only use what is strictly necessary, a short cookie section in your privacy policy may be enough;
  • if you use advertising, social media embeds or analytics that need consent, show a banner with “Accept” and “Reject” at the same level, and a link to change the choice later.

Rules on analytics are changing in some countries, so check your regulator’s current guidance.

When do I need terms and conditions?

It depends on what happens on your site.

  • You sell online (gift vouchers, click and collect, paid classes): you need terms of sale. Consumer law in the EU and UK requires clear information before purchase: total price, delivery, cancellation rights where they apply, how to complain.
  • You take bookings without payment (a table, a haircut, a quote visit): formal terms of sale may not be needed, but customers should see your rules before they book: cancellation deadline, lateness, what happens if they do not turn up. Our guide to booking cancellation policies helps you write them.
  • Your site is just a showcase: no terms needed, but keep prices clear in the shop.

In France, businesses selling to consumers must also give the details of a consumer mediator. Other EU countries have their own dispute-resolution rules: check yours.

Is there a legal notice template I can adapt?

Here is a general template for a small business. Replace everything in square brackets, remove lines that do not apply, and have it checked if your trade is regulated.

Legal notice Website published by [Business name] ([legal form: sole trader, Ltd, LLC…]) Registered office: [full address] Phone: [number] · Email: [email address] Registration: [register name and company number, if any] VAT number: [number, if registered for VAT] Person responsible for content: [First name Last name], [role] Hosting [Hosting provider name], [address], [phone] Professional information (if applicable) [Licence number, supervisory authority, professional body] Personal data Information you send through this website (contact form, booking) is used by [Business name] only to answer you and manage your request. See our privacy policy for details and for how to exercise your rights: [link]. Intellectual property Texts, photos and logos on this website belong to [Business name] or their authors. Please do not reuse them without permission.

Use it as a starting point, not as a final legal document. A local accountant, chamber of commerce or trade association can usually confirm what your country requires.

What changes depending on my type of business?

  • Restaurants, bars, cafés: business details, booking rules visible on the booking page, and terms if you sell vouchers or takeaway online. See Voxtya for restaurants.
  • Hair and beauty salons: appointment cancellation rules, and written consent before posting photos of clients.
  • Shops and wine merchants: full terms of sale if you sell online, with delivery and cancellation rights; age checks for alcohol where the law requires them.
  • Bakeries: terms if you take paid orders online (celebration cakes), and allergen information as your local rules require.
  • Tradespeople: registration, licence or insurance details where your country requires them; our tradesperson website guide covers what reassures customers.
  • B&Bs and guesthouses: booking and cancellation conditions, deposit terms if you take one, and clear prices including taxes.

What does a Voxtya website already include?

Every site published with Voxtya’s website service gets a generated “Legal notice” page, linked from the footer next to a “Privacy policy” link. It includes:

  • your business name, address, phone and email, as you entered them;
  • who built the site (Voxtya) and the hosting provider, with their details;
  • a personal data paragraph explaining that Voxtya processes the information on your behalf, with a link to Voxtya’s privacy policy;
  • an intellectual property statement.

What is up to you: the page does not know your legal form, registration or VAT number, licence details or any mediator. Check your contact details are complete and add the missing information in a text block on your site, for example titled “Legal information”, using the template above.

What mistakes should I avoid?

  • copying another site’s pages, with their name or hosting provider still in them;
  • legal pages that cannot be found from the footer;
  • a privacy policy that promises things you do not do (or forgets a tool you do use);
  • a cookie banner with only an “Accept” button;
  • an old address or phone number after a move;
  • no booking rules, then arguments about cancellations.

Checklist before you publish:

  • Legal notice: name, legal form, address, email, phone
  • Registration and VAT numbers where they apply
  • Hosting provider details
  • Licence or professional body details for regulated trades
  • Privacy policy matching what you really collect
  • Cookie choice if you use non-essential cookies
  • Terms if you sell online, booking rules if you take bookings
  • Footer links on every page

The steps at a glance

The steps to publish a legal notice, privacy policy, cookie notice and terms on a small business website.

  1. Gather your details. Registration documents, VAT number, licence details and your hosting provider’s contact details.
  2. Write the legal notice. Adapt the template with your business name, legal form, address and contacts.
  3. List the data you collect. Forms, bookings, newsletter, tools on the site: note what each one collects and why.
  4. Write the privacy policy. Who you are, why you use the data, who receives it, how long you keep it, people’s rights.
  5. Check your cookies. Ask your provider which cookies the site uses and add a real choice if needed.
  6. Add terms or booking rules. Terms of sale if you sell online, clear rules if you take bookings.
  7. Link from the footer. Make every legal page reachable from every page, and review it once a year.

Do it without spending your evenings on it

Voxtya website

A website for your business, with a legal notice page generated from your details and footer links on every page. €29/month, 30-day free trial, domain included with an annual plan.

This guide for your trade

Go further

Sources

The rules quoted in this guide come from these official pages, checked on October 17, 2026.

Is a legal notice required in the US?
There is generally no federal requirement for an EU-style legal notice. A clear contact page with your business name and address is still good practice, and some states and trades have their own disclosure rules, so check locally.
What is the difference between a legal notice and a privacy policy?
The legal notice says who runs the website and how to reach them. The privacy policy explains what personal data you collect, why, who receives it, how long you keep it and how people can exercise their rights.
Can I use a free privacy policy generator?
It can be a starting point, but read the result carefully: it must describe what you really do. A generic policy that mentions tools you do not use, or forgets your booking system, is misleading.
Do I need a cookie banner if I only use basic analytics?
It depends on the tool and your country. Under UK and EU rules, cookies that are not strictly necessary generally need consent; some regulators accept limited audience measurement under strict conditions. Check your regulator’s current guidance.
Where should I put my legal pages?
In the footer of every page, with clear names such as “Legal notice”, “Privacy policy” and, if needed, “Terms”. Visitors should find them in one click from anywhere on the site.
Does a sole trader need to publish their home address?
In many countries the business address must appear on the site. If you work from home and do not want to show it, ask about a business address service, and check what your local rules allow.
Is my website provider responsible for my legal pages?
No, as the business running the site you are responsible for its content. Your provider should give you the hosting details and explain which tools and cookies the site uses.
Do I need terms if I take bookings but no payment?
Formal terms of sale may not be required, but you should show your booking rules (cancellation, lateness, no-shows) before people book. It avoids disputes and makes your policy easier to enforce.
How often should I update my legal pages?
Whenever something changes (address, legal form, a new tool on the site) and at least once a year. Put a date at the bottom of your privacy policy so you know when you last checked it.
FAQ

Your questions, answered.

Another question?

Write to us: a real person gets back to you quickly.

Contact us
30-day free trial, no commitment

Put it into practice.

Voxtya brings Google reviews, website, bookings and social media together in one app built for local businesses.