Legal pages are the part of a website almost nobody enjoys. They are also the part people tend to copy from somewhere else, paste in once and never touch again. That is how you end up with a privacy policy that mentions tools you do not use and misses the ones you do.
A quick note before anything else: we are not a law firm, and nothing on this page is legal advice. We set up the pages and the consent tools, and keep them aligned with how your site actually works. Your business should have a lawyer review the wording of your policies.
Your policies should describe your site as it really is, not as it was the day you copied them.
Why it matters
Your legal pages tell visitors what you collect, why, and what they can expect from you. They build trust when they are clear and current. Many third-party tools, including ad platforms and payment processors, also expect you to have a privacy policy in place. And as your site grows, adding analytics, pixels, a newsletter or payments, what you collect changes. Your pages need to keep up.
What people miss
- A policy that does not match the site. If you added Google Analytics, a Meta pixel, a chat widget or a booking tool, your privacy policy should reflect that. Many DIY sites have a generic policy that names none of them.
- Consent banners that do not do anything. A banner that says “we use cookies” while every tracking script loads anyway is decoration, not consent. If you use a consent tool, it should actually control which scripts run.
- No way to change your mind. Visitors should be able to revisit their choice later, usually through a link in the footer.
- Missing terms. If you sell anything, offer accounts or run a service, terms of use or terms of sale set out the basics. Online stores usually need refund and shipping policies too.
- Email consent shortcuts. Pre-checked “subscribe me” boxes and adding contact form leads straight to a marketing list are common mistakes. Keep marketing consent separate and clear, include an unsubscribe link in every marketing email, and include your physical mailing address as US rules require for commercial email.
- No accessibility statement. It is a simple page that tells people you care, and how to reach you if something does not work.
- Footer links that break. After a redesign or a move to a new domain, policy links often point to old pages or nowhere.
- No date. A “last updated” date helps visitors and helps you remember to review.
How AftUp handles it
We start by listing what your site actually collects and which tools touch visitor data. That list becomes the basis for your pages and consent setup. You own the pages, the content and the accounts.
- Starter includes one small content change a month, which can cover updating a policy page after you add a new tool, plus a monthly form test that can include checking your newsletter sign-up and consent checkbox.
- Growth gives you up to 2 hours a month of changes, which typically covers setting up a consent management tool, connecting it so analytics and ad tags respect visitor choices, adding consent checkboxes to forms and creating an accessibility statement.
- Scale adds up to 6 hours a month for larger work, like policy pages for multiple regions or an online store’s full set of policies, and a quarterly strategy call where we flag pages that may need a fresh legal review.
In every case, we set up the pages and the tools. We do not write legal advice, and we recommend you have a lawyer review your policies. If you use tracking, our analytics page explains how consent and measurement fit together.
Do it yourself
A practical starting routine:
- List what you collect. Forms, accounts, analytics, ad pixels, chat, payments, newsletter. Note which company provides each tool.
- Compare against your privacy policy. If a tool is missing or an old one is still listed, update the policy, then have a lawyer look it over.
- Use a reputable starting point. Policy generators and lawyer-drafted templates are better than copying another company’s page. Treat the result as a draft for review.
- Test your consent banner. Open your site in a private window, decline cookies, and use your browser’s developer tools to see whether tracking scripts still load.
- Check your forms. Make sure any marketing sign-up checkbox is unchecked by default and clearly worded.
- Fix your footer. Confirm privacy, terms and accessibility links work on every page.
- Set a reminder. Review your pages whenever you add a tool, and at least once a year.
For the accessibility side of things, see our accessibility page.
If you would like a quick read on what your site is missing, our free site check covers legal pages and consent setup too.