Most small Canadian business sites need three: a privacy policy, terms covering how you do business, and clear identification of who the business actually is. A fourth, an accessibility statement, is worth having. The common failures are having none at all, or having an American template describing obligations that do not apply.
What is actually needed
| Page | When you need it |
|---|---|
| Privacy policy | As soon as you collect anything, which a contact form does. Effectively always. |
| Terms | Where you sell online, take bookings, or want written conditions on quotes and warranties |
| Business identification | Always, and it usually lives in the footer and on the contact page rather than as a page |
| Accessibility statement | Not universally required and increasingly expected. Cheap to provide. |
That is the whole list for a typical service business. Sites that carry eight legal pages have usually installed a template pack, and length is not the same as coverage.
The privacy policy
The one nearly every site needs and the one most commonly copied from the wrong country.
Canadian private sector privacy law works differently from both American and European regimes, and a template written for either will describe rights your customers do not have while omitting the obligations you actually carry. Some provinces have their own legislation as well, which affects which rules apply to you.
What the policy has to do is straightforward: say what you collect, why, who else receives it, where it is held, how long you keep it, and how someone can ask to see it or complain. Written honestly about a small business, that is a page rather than a document.
The most common error is describing collection you do not do, copied from a template. The second is omitting collection you do do, particularly analytics and anything a third-party widget gathers.
Terms
Optional for a brochure site and genuinely useful once money or scheduling is involved.
For a service business the useful content is not a wall of clauses. It is the handful of things you would otherwise have to explain on the phone every time: how long a quote stands, what a deposit covers, cancellation notice, what the warranty includes and excludes, and who is responsible for access and permits.
Writing those down once and pointing at them is worth more than any generic set of terms, because they are the points that actually cause disputes in your trade.
Identifying the business
Frequently overlooked and simple to fix. Your legal business name, a way to reach you, and where you are based should appear on the site.
This serves three purposes at once. It is what a customer checks before trusting you with a deposit. It is required in commercial email under Canadian rules, which means it needs to exist somewhere to link to. And it is part of what makes your business look like an entity rather than an anonymous page.
A home-based business does not need to publish a residential address. Naming the municipality and providing a phone number and email satisfies the practical purpose.
Where templates go wrong
- Wrong jurisdiction. References to American or European frameworks that do not govern you, alongside silence on the rules that do.
- Placeholders left in. Square brackets and company names that are not yours, which undermines every other credibility signal on the site.
- Describing things you do not do. Cookie categories you do not set, data transfers you do not make, rights you cannot actually administer.
- Never updated. A policy written before you added a booking tool or a chat widget no longer describes what happens.
- Buried. Legal pages belong in the footer of every page, which is where people look for them.
The cookie question
Canadian requirements around consent for analytics and tracking are less prescriptive than the European regime that produced the banners on every site, and expectations have been moving.
A proportionate approach for a small business is to say plainly in the privacy policy what is set and why, and to give people a way to opt out where the tools support it. Whether a banner is warranted depends on what you actually run and who your visitors are, and it is worth confirming rather than copying whatever a competitor has.
The proportionate view
None of this needs to be elaborate. A small business collecting names and phone numbers through a contact form is not running a data operation, and a policy that says so honestly, in plain language, is more useful and more defensible than eight pages of borrowed clauses.
What matters is that the pages describe what your business genuinely does, that they are current, and that they are easy to find. This is general information rather than legal advice, and for anything unusual, particularly if you handle payment or health information, it is worth a conversation with someone qualified.
Frequently asked questions
What legal pages does a Canadian business website need?
A privacy policy in essentially every case, terms where you sell or take bookings, and clear identification of the business. An accessibility statement is worth adding and is cheap to provide.
Can I use a privacy policy template?
Only as a starting point, and check the jurisdiction. Templates written for American or European law describe rights your customers do not have while omitting the obligations you actually carry.
Do I need a privacy policy for a simple contact form?
Yes. Collecting a name, email, or phone number is collection, and the policy is what tells people what happens to it and how to ask about it.
What should terms cover for a service business?
The things you otherwise explain by phone every time: how long a quote stands, what a deposit covers, cancellation notice, warranty inclusions and exclusions, and responsibility for access and permits.
Do I need a cookie banner in Canada?
Requirements here are less prescriptive than the European regime that produced them, and expectations have moved. Say plainly in your policy what is set and why, and confirm what applies rather than copying a competitor.
Do I have to publish my home address?
No. Naming the municipality and providing a phone number and email satisfies the practical purpose for a home-based business, while still identifying who the business is.
West Coast Media Solutions Inc. provides web design, web development, hosting, digital marketing, and business consulting to organisations across Canada, drawing on more than twenty-five years in the field.
Legal pages copied from somewhere else?
We write them to describe what your business actually does under the rules that actually apply to you.
Start a Conversation