What your UK website legally needs in 2026
Short answer: company identification details, a privacy notice that meets UK GDPR transparency requirements, cookie consent that meets PECR, and terms of business that are incorporated properly. Most sites have some of it, badly. Website legal packs from £595.
Company information is a legal requirement, not a courtesy
A UK company must state its registered name, registered number, place of registration and registered office address on its website, and e-commerce regulations require contact details including an email address. Trading names without the registered name behind them are a common and easily fixed defect.
The privacy notice: transparency, not decoration
UK GDPR requires you to tell people what you collect, why, on what lawful basis, how long you keep it, who you share it with and what rights they have. A copied notice that names lawful bases you do not rely on is worse than none, because it is a written record of a claim you cannot support.
Cookies are PECR, not GDPR
Non-essential cookies, including most analytics and all advertising cookies, need consent before they are set. That means no pre-ticked boxes, no cookies dropped on page load, and refusing must be as easy as accepting. A banner that only says "we use cookies" does not achieve consent.
Terms that bind
Terms are only incorporated if the customer had reasonable notice before contracting. A link in the footer that nobody passes through is weak; a tick box at checkout is strong. And where you sell to consumers, statutory rights sit above whatever your terms say.
Fixed fee agreed in writing before any work begins, written reply within 24 hours, handled entirely in writing. Send your enquiry or WhatsApp +44 7822 014 066.