*This is general information, not legal advice. Privacy laws vary widely by country and US state. Use this to prepare questions for a qualified professional.*
Step 1: map what your site collects
Make a list of everything on your site that collects or shares data:
| Source | Data | Goes to |
|---|---|---|
| Contact / quote form | Name, contact details, message | Your inbox, CRM, form service |
| Analytics | Pages viewed, device, approximate location | Analytics provider |
| Spam protection | Browser signals | Challenge provider |
| Booking embed | Name, contact, appointment | Booking tool |
| Chat widget | Messages, contact details | Chat provider |
| Embedded maps or videos | Browser data, cookies | Map or video provider |
| Ad or social pixels | Browsing behaviour | Ad platforms |
This map is the foundation for everything else, and it often surprises owners.
Step 2: forms
- Ask only what you need — see quote form fields.
- Say briefly near the form how the information is used, with a link to the privacy notice.
- Keep marketing consent separate and unticked.
- Keep sensitive information out of general forms.
- Know where submissions are stored and for how long — see customer data in automations.
Step 3: analytics, pixels and cookies
Cookies and similar technologies are regulated differently around the world. In the UK and EU, for example, consent is generally required for non-essential cookies; the European Commission's data protection pages are a starting point. India has its own Digital Personal Data Protection framework. In the US, requirements vary by state.
If you use a consent banner, it should actually control what loads. Google documents consent mode for its tags; other providers have equivalents. A banner that loads everything regardless of the visitor's choice is worse than having a clear notice.
Step 4: the privacy notice
A useful privacy notice, in plain language, typically explains:
- Who you are and how to contact you about privacy.
- What data you collect, through which parts of the site.
- Why you collect it and how you use it.
- Which third parties receive it.
- How long you keep it.
- What choices and rights visitors have, and how to exercise them.
Have a professional review it for the places you operate.
Step 5: keep it true
Every time you add a tool — a chat widget, a pixel, a booking embed — update the data map and the notice. Remove tools you no longer use rather than leaving them loading silently.
On MendRev's own site
MendRev publishes its own privacy notice describing what our website collects. On client sites, we list the tools we install so the notice can be accurate; we don't provide legal advice.
Questions
Do I need a cookie banner?
It depends on where you and your visitors are and what your site loads. Some jurisdictions require consent before non-essential cookies or similar technologies are used. Get advice for your situation.
Can I copy another site's privacy policy?
It's unlikely to describe your site accurately. A privacy notice must reflect the tools and data flows you actually use.
Sources and further reading
- European Commission's data protection pages commission.europa.eu
- Digital Personal Data Protection framework meity.gov.in
- consent mode developers.google.com
Official documentation changes. Check the current version before you rely on a rule, limit or setting.
Next step
See a site built around your real details.
Look at sample layouts (fictional previews, not client work), read published website pricing, or ask for a free concept preview.
Already happy with your site? Website Maintenance covers monitoring, a monthly form test, backups and edits.