What legal pages does a UK business website need?

Understand which UK website information may be legally required and which pages are useful depending on data collection, cookies, legal structure and online sales.

UK business website with privacy, cookie, company information and customer terms documents

Direct answer

The answer in brief

There is no universal set of legal pages for every UK business website. The required information depends on the organisation, the personal data and cookies used, and whether the site forms contracts or sells to consumers online. Many sites need an accessible privacy notice and cookie information, while company disclosures and pre-contract consumer information apply according to the business and activity.

UK rules generally require businesses to provide particular information or choices. They do not always require a page with a prescribed title. A small brochure site, an online shop, a members' portal and a regulated service collect different data and create different customer relationships.

Start with what the organisation is, what the website does, which technologies it uses and whether a customer can enter a contract through it. Then decide where each required item should appear so people can find and understand it.

Which information is required in common circumstances?

Website activity or statusInformation commonly requiredHow it is often presented
Processing personal dataPrivacy information including purposes, lawful bases, recipients, retention, individual rights and other details that apply.An accessible privacy notice, with timely notices beside relevant forms or interactions where useful.
Using cookies or similar technologiesClear information about their purposes, plus consent before use where an exemption does not apply.Cookie information and a consent control; this may be a separate policy or part of a wider privacy notice.
Trading through a registered companySpecified company particulars, including the registered name and other statutory details.A footer or company-information page available throughout the website.
Providing an online serviceIdentity and contact information required by applicable electronic-commerce rules, with extra details for some regulated activities.Contact, legal information or terms pages, supported by clear checkout details where relevant.
Selling goods, services or digital content at a distancePre-contract information relevant to the sale, including price, payment, delivery, cancellation and complaint information where applicable.Product and checkout content, terms of sale, delivery, returns and cancellation information.

The exact duties and exceptions matter. For example, cancellation rights differ by product, service and circumstance. GOV.UK's guidance on online and distance selling provides a starting point, but businesses should obtain legal advice for their particular contracts.

When does a website need a privacy notice?

If the organisation processes personal data, it must provide people with privacy information. Website activities can include contact forms, accounts, purchases, recruitment, analytics and marketing. The notice should describe the real processing rather than repeat a generic template.

  • Who the controller is and how to contact it.
  • What personal data is used, why and on which lawful basis.
  • Who receives the data, including relevant service providers.
  • International transfer information where applicable.
  • How long information is retained or how the period is decided.
  • People's data-protection rights and how to complain.
  • Any other information required by the circumstances.

The ICO's current right-to-be-informed guidance explains the full information requirements and when it must be supplied.

You must give clear information about cookies and similar storage or access technologies. Consent is required before using technologies that are not covered by an applicable exemption. A separate page titled “Cookie Policy” can be convenient, but the title and page count matter less than accurate information and a working choice.

Audit the actual website before deciding what is needed. The guide Does your website need a cookie banner? explains consent, exemptions and implementation in more detail.

Where should company and business information appear?

Registered companies must display specified trading disclosures on their websites, including the registered company name. Other required particulars include where the company is registered, its registered number and registered office address. There are further rules for some names, statuses and regulated activities.

Our sourced guide to information a UK limited company must show on its website covers those particulars and separates them from optional footer content. Sole traders, partnerships, charities and regulated organisations should check the rules for their own structure rather than copying a limited-company footer.

Does every business website need terms and conditions?

No single generic “Terms and Conditions” page is automatically required for every website. Terms become important when the site forms or supports a contract, supplies an online service, licences content, accepts bookings or sells goods, services or digital content.

For consumer distance sales, required information must be clear before the customer is bound. A terms page may hold some of it, while price, delivery, cancellation and product information may need to appear within the actual buying journey. Consumer terms must also be fair and suitable for what the business sells.

Which pages may be useful without being universally mandatory?

  • Delivery, returns and cancellation guidance for customers who buy online.
  • Booking, subscription or service terms where customers make commitments.
  • A complaints process and relevant dispute-resolution information.
  • An accessibility statement explaining the site's accessibility and contact route.
  • Acceptable-use or account rules for portals and community services.
  • Copyright or content-licensing information where it helps set expectations.

These pages can improve clarity and reduce disputes, but their value and legal status depend on the website. Avoid presenting every useful page as a statutory requirement.

  1. Inventory
    List the website's forms, tracking, accounts, sales, bookings and third-party services.
  2. Identify
    Confirm the legal entity, audience, contracts and any sector-specific obligations.
  3. Draft
    Use the real data flows and customer journey, with professional advice where needed.
  4. Implement
    Make information accessible at the right time and ensure choices actually control the technology.
  5. Review
    Recheck after supplier, tracking, product, legal or business changes.

Probeck's Website Compliance service can help audit and implement website changes against requirements agreed with the business or its adviser.

References and sources

  1. ICO: What privacy information should we provide?Information Commissioner’s Office
  2. ICO: Guidance on storage and access technologiesInformation Commissioner’s Office
  3. GOV.UK: Online and distance selling for businessesGOV.UK
  4. The Companies (Trading Disclosures) Regulations 2015UK Legislation
  5. Electronic Commerce (EC Directive) Regulations 2002UK Legislation