Publish a privacy policy page that says what personal data your site collects, why, who you share it with, where it is stored and how people can contact you, then link it in your site’s footer. If your site uses analytics or advertising cookies, add a consent banner that holds them back until the visitor agrees.
What your privacy policy should say
- Who you are and how to contact you about personal data.
- What you collect: contact-form entries, orders, newsletter sign-ups, analytics and cookies.
- Why you collect each, and how long you keep it.
- Who you share it with: for example your payment provider, email newsletter service, Google Analytics and your hosting provider.
- Where it is stored. If we host your site, that is outside Zimbabwe: web hosting and email run on our servers in Europe and the USA, and a VPS or dedicated server sits in the data centre you chose. See Data centres.
- People’s rights to see, correct or delete their data, and how to ask.
Add it in WordPress
- In WordPress, open Settings → Privacy.
- Create a new Privacy Policy page, or select one you already have.
- Open the Policy Guide on the same screen. It suggests wording, including text your plugins provide about the data they collect.
- Edit the draft so it describes what your site actually does, then publish it.
- Add the page to your footer menu, under Appearance → Menus, or in the footer template under Appearance → Editor on block themes.
On any other site, create a page called Privacy Policy, link it in the footer, and add a short line under each contact form, such as “We use your details only to reply to you. See our privacy policy.”
Add a cookie notice
- List your cookies. Analytics (such as Google Analytics), advertising pixels, embedded videos and chat widgets usually set cookies. Cookies that only make the site work, such as a login or a shopping cart, generally don’t need consent.
- Install a consent plugin. In WordPress, go to Plugins → Add New Plugin and choose a cookie-consent plugin, for example Complianz or CookieYes. If you use Google Analytics, pick one that supports Google Consent Mode.
- Block until consent. Set it so analytics and advertising cookies load only after the visitor clicks Accept, and make Reject as easy to find as Accept.
- Test on a phone. Open the site in a private window. The banner should appear without covering the whole screen, and rejecting should stop the analytics loading.
Don’t copy another company’s privacy policy. It describes their data, not yours, and a policy that doesn’t match what your site does is worse than a short, honest one.
For what Zimbabwean law expects, see What does Zimbabwe’s Cyber and Data Protection Act mean for my website? This guide is practical help, not legal advice.
Still stuck? Open a support ticket or message us on WhatsApp +263 73 563 9917, Monday to Friday, 08:00–17:00 CAT.
Updated 6 November 2026. Something here out of date? Tell us.