Section 13: Legal: Cookie Consent & Policy, Disclaimers, Privacy Policy, Terms & Conditions, and ADA Compliance

Disclaimer: The information provided is for educational purposes only and does not constitute professional advice.
Affiliate Disclosure: Some links on this page are affiliate links. I may earn a commission if you make a purchase through these links, at no cost to you.


We’re finally here at my least favorite section .. the most stressful one (definitely it was, for me!). I know it can be overwhelming when you're new to blogging and have to deal with legal compliance. Let's go over it one at a time.

- Legal things you'll need for your blog:

🌸 Cookie Consent & Policy with Cookie Box/Banner
Cookies are just small files that websites store on your device in order to remember your info. For example, session cookies help keep you logged into a site during use. Some cookies are needed so a website can work, but there are others that are not needed.

🔸 The 2 types of cookies:
1.) Essential cookies: necessary for a website to function (user consent = not required)
2.) Non-essential cookies: cookies for analytics, ads, etc. (user consent = required)

🌷 If your site has non-essential cookies then cookie consent is legally required and you’ll need a cookie consent banner to let your visitors either accept or decline them.

🔸 Let's quickly go over two of the strictest privacy laws ...
1.) GDPR (General Data Protection Regulation) and
2.) CCPA (California Consumer Privacy Act)

--> GDPR: If your site collects personal data from visitors in the European Union (EU), then you're required to comply with GDPR (even IP address counts as personal data)
--> CCPA:
If your site has California visitors and collects personal data, you may need to comply with CCPA *depending* on if you meet any of the 3 requirements (The CCPA has 3 requirements that, if any one is met, you're required to comply. You can learn more about CCPA requirements here.) If your site run ads, you'll need to give your visitors an option to opt out of having their data sold or shared by the ad network.

🌷 The type of site you have will determine which laws you need to cover; you don't have to include every single law in the world because it might not apply to you, but just so you know - even though GDPR and CCPA are two of the strictest laws, there are laws from other regions, such as:

- LGPD (Brazil) - similar to and inspired by GDPR
- PIPEDA (Canada)
- APA (Australia)
- POPIA (South Africa)
- PDPA (Singapore, Thailand and Malaysia)
- PIPL (China)
- PIPA (South Korea)
- APPI (Japan)
- etc.


🌻 Tip: If it feels overwhelming one thing you can do is have a CLEAR privacy policy that tells your readers how your site handles their data, also - in your policy you can include sections for each region that you expect to get traffic from. We'll discuss helpful options and tools, later :) Since anyone from any country can access a site since it's on the internet, it's good to be as transparent as you can.

🔸 Depending on what's on your site, I recommend a cookie banner that meets these standards:
** 1.) GDPR compliance (European): Under GDPR you need to get consent before non-essential cookies are launched
** 2.) CCPA compliance (California):
“Do Not Sell or Share My Personal Information” - you need to provide this option if your site sells or shares data from CA residents
** 3.) Allows users to edit cookie preferences
** 4.) Keeps logs for proof of consent


🌸 Disclaimers
The next thing you'll need is a disclaimers page. Disclaimers are important to have and helps protect you. It's good to have a full disclaimer page and then also short disclaimers where needed. We’ll talk about 2 specific types of disclaimers:

1.) Affiliate disclosures for affiliate programs are legally required by the Federal Trade Commission (FTC). It's good to include this in your disclaimers page and I also recommend that you disclose it at the beginning of your blog articles and on any Pinterest pins, social media posts, etc. so that your audience will be aware. You can use a disclosure like: “This post contains affiliate links. If you click on a link and make a purchase, I may earn a small commission at no extra cost to you. I only recommend products I believe in. Thank you.”

2.) If you’re giving recommendations, I would use an ‘advice disclaimer’ similar to what I have at the top of the article. It basically lets your readers know that you're not giving professional advice, and that it's your own opinion.

This free tutorial explains Disclaimers and you can download a free Disclaimer template from Iubenda and edit it for your website here: https://www.iubenda.com/en/help/171982-disclaimer-template

🌸 Privacy Policy
If your site collects any personal data at all, you will *NEED* a privacy policy.

The things that collect data include: Google Analytics for AdSense, contact forms, email newsletters sign-ups, non-essential cookies, etc.

🌸 Terms & Conditions
Terms and Conditions sets rules for how your site is to be used, so if for example your site is only informational site where users don't input data, it's fine to omit. It's recommended for E-commerce sites and service providers to include this.

🌷Tools:
For legal documents generators, there are both free and paid tools like PrivacyPolicies.com, Termeggedon, TermsFeed, and Iubenda.

For cookie consent management, I personally use and really like CookieYes so far because it's easy to use, and includes consent logs, a cookie policy, and support - all available even on the free plan. I find it pretty affordable and I like how the free plan is up to 15,000 page views/month and the lowest paid plan supports 100,000 page views. It's a gold-certified Google CMP Partner, there are many features, and it complies with GDPR, CCPA, LGPD, etc.

Complianz is a good free plug-in [for Wordpress.org sites only] that handles cookie consent notice, policy, and management for GDPR, CCPA, LGPD, and more.

🌻 Tips: For Privacy Policies - while there are free ones - I strongly recommend ones that auto-update so you don't have to monitor and update laws yourself because that is a hassle! Many people who are serious about compliance also hire privacy lawyers to look over and audit their sites.

(Also - If you have an
e-commerce store, a Refund/Return Policy is good to have.)

🌸 Americans with Disabilities Act (ADA) Compliance
Lastly, ADA (Americans with Disabilities Act) compliance helps make your site easy for people with disabilities to access. I have heard of websites being sued for not complying. I believe that it is strictest for e-commerce stores, but even for bloggers I'd be mindful just to stay safe.

🔸Here are some examples on how to make your site compliant:
- Good color contrast (ex: no white background with light-colored text)
- Easy-to-read text
- Alt text for images

-
Captions for videos
- Making your site accessible for those with screen readers and keyboard-only users
- etc.


You can read this article to learn more: US Dept. of Justice Civil Rights Division: Guidance on Web Accessibility and the ADA

Disclaimer: The information above is based on my own personal research. I am not a privacy lawyer, and this does not constitute legal advice. I am not responsible for any actions you take (or don't take) based on this article. Please do your own due diligence and consult with a lawyer to make sure your blog is fully compliant with laws that may apply to you.

Go to next --> Essential Pages
<-- Back to 'E-commerce: Print-on-Demand (POD)'

<<-- Go back to 'Start A Blog' Table of Contents