Web & SEO
What is a privacy policy?
A privacy policy is a published statement telling visitors what personal data a site collects, why it collects it, who it is shared with, and what rights they have over it.
New to Bolt? Sign up free.
Technical definition
Most privacy regimes require a policy to state the categories of data collected, the purposes and legal basis for processing, the third parties data is shared with, retention periods, the rights available to the individual, and how to exercise them. GDPR, CCPA, and similar laws differ in detail but overlap in structure.
The obligation is usually triggered by processing personal data from residents of a covered jurisdiction, not by where the business is located. A contact form, an analytics script, or an embedded map can each constitute collection.
In plain terms
A page that says what information you gather about visitors, what you do with it, and who else sees it.
If your site has a contact form or analytics, you are collecting personal data, which means you probably need one.
Why it matters
The practical trigger for most small businesses is not a regulator. It is that the services they rely on require it. Payment processors, ad platforms, app stores, and analytics providers all ask for a published policy as a condition of use.
The common failure is a generated template that describes practices the business does not follow, listing data it does not collect and omitting the tools it actually runs. That is worse than nothing, because it is a published statement that is untrue. Start from a list of every tool on your site that touches visitor data, then make the policy match. This page is background, not legal advice, and a policy is worth a review by someone qualified before it goes live.
