Privacy Policy & Terms and Conditions

NOTE — a new European privacy law that affects most U.S. businesses (General Data Protection Regulation, or “GDPR”) went into effect on May 25, 2018!  Read on for more details below and click here for our GDPR training, checklist, and privacy policy template. 

Does your company website allow your visitors to contact you, or submit their information to sign up for an e-mail list, contest, or buy a product? Then you must have a privacy policy, and you should also have terms and conditions of use, which can be linked from your footer on every page. I’ve lumped these together in this guide, but they’re a little bit different.

Privacy policy: If you collect any personal information through your website (even just an e-mail address through an opt-in or contact form), you are required by law to post a policy on your website telling your visitors what you will do with this information, such as whether you sell it to third parties or share it with your advertisers or partners. You must let visitors know if you use tracking mechanisms that display ads for your products or services as they move around the Internet to other sites, and how you respond to “Do not track” signals.  You must also communicate whether visitors have choices about sharing their information, and whom they should contact with questions about your privacy policies and practices.

Under the new EU privacy rules (which apply to most U.S. businesses if they have any contact with EU residents!), you must also post a link to your privacy policy where you collect information (not just in your website footer).  You must also comply with new rules that give EU residents certain rights about how their data is handled, such as the right to request their data from you, the right to request correction to their data, and the right to request that you erase their data (this is just a few examples).  Read more about the GDPR rules and find additional resources here.

There are also special, very stringent, requirements you must follow if you collect information from those under the age of 13 (more on those here).  If your business is not geared towards children, you may include a note in your privacy policy that you do not intentionally collect information from anyone under 13 years old.

Terms and conditions: This is the guidebook that tells your website visitors how they can use your site. You own the copyrights to all the awesome photos, text, videos, and other content that you’ve created and posted on your website. Your terms and conditions should tell visitors exactly what they can do with your content (share it!), and can’t do (sell or copy it to compete with you). If you allow users to comment or post on your website, or operate a members-only site, you can also set the rules for users participating there.

Did you just realize you need a privacy privacy policy and terms and conditions for your website?

Have you cobbled together these documents from other people’s websites, but aren’t sure if you’re really protected?  Don’t worry, we’ve got you covered.

We work one-on-one with online and creative entrepreneurs every day drafting custom website privacy policies, terms and conditions, terms of use, disclaimers, and more.

New to business or not ready to invest in a custom contract?  We also offer contract templates are a perfect fit if you’ve tried to write your own contract or borrowed one from a friend, but you’re not sure it includes all the right terms.  You can customize our templates to the way you do business, and easily change them as your business grows.

*This website is attorney advertising and does not establish an attorney-client relationship, which is only formed when you have signed an engagement agreement.  Filling out the appointment scheduling form does not establish a client-lawyer relationship, and your sending information to us does not indicate that the Law Office of Autumn Witt Boyd PLLC or any lawyer in our firm is willing to consider forming a client-lawyer relationship. Unless the Law Office of Autumn Witt Boyd PLLC agrees to consider representing you, information that you send to this firm will not be kept confidential or privileged.

We cannot guarantee results; past results do not guarantee future results.

Autumn is not a patent attorney and our firm does not work on any patent law matters. 

Get our GDPR Compliance checklist
for U.S. Creative & Online businesses

You'll also receive our top legal resources for online & creative entrepreneurs


We were having trouble with Facebook ad approval because of issues with the terms and conditions and privacy policy on our website. With Autumn's help, we were able to increase our ad approval rate by having the right policies on our site. The AWB Firm’s all-female team does a stellar job at fast, efficient communication, and their smart, streamlined processes make working with them a breeze.

Brook Powers Chalene Johnson's SmartLife Inc. & Team Johnson companies, Vice President