Your Business Website Has Two Legal Requirements — Do You Have Both?
Most South African business owners know they should probably have a Privacy Policy on their website.
Fewer know that they also need Website Terms and Conditions.
And many who have both are still using documents copied from another website years ago — documents that may not comply with current South African law.
Here is what your business website actually needs, and why it matters.
The Two Documents Every Business Website Must Have
- Website Terms and Conditions
Website Terms and Conditions (sometimes called Terms of Use) is a legal agreement between you and anyone who visits or uses your website.
It sets the rules for how your site may be used, limits your liability for errors or third-party content, and establishes the basis on which any transactions or interactions take place.
Under the Consumer Protection Act (CPA) and the Electronic Communications and Transactions Act (ECTA), businesses that operate websites and e-commerce platforms have specific disclosure and consumer rights obligations.
Your Terms and Conditions are where those obligations are met.
Key clauses include:
Acceptable use — what visitors may and may not do on your site
Intellectual property — ownership of content, images, and materials
Disclaimer of warranties — limiting liability for the accuracy of information
Limitation of liability — capping what your business is responsible for
Governing law — confirming South African law applies
Dispute resolution
Privacy Policy
A Privacy Policy is a legal document that tells your website visitors what personal information you collect about them, why you collect it, how you use and store it, who you share it with, and what rights they have over it.
This is not optional.
Under POPIA (the Protection of Personal Information Act), any South African business that collects personal information — including names, email addresses, or phone numbers through a contact form — is required to inform visitors about how their data is processed.
A compliant Privacy Policy must cover:
What personal information is collected (including cookies and analytics data)
The purpose for which it is collected
Who it is shared with (including third-party tools like Google Analytics, email platforms, or payment processors)
How it is secured
How long it is retained
The rights of data subjects — to access, correct, or delete their information
How to lodge a complaint with the Information Regulator
Why “Borrowed” Policies Are Risky
Copying a Terms and Conditions or Privacy Policy from another website creates several problems.
First, it was written for their business, not yours.
Second, it may not comply with South African law at all if it was written for a different jurisdiction.
Third, it almost certainly does not reflect current POPIA requirements, which only came into full effect in 2021.
A policy that does not accurately describe how your business actually processes data is, in some respects, worse than no policy — because it actively misleads visitors about their rights.
The Contracts4Biz Solution
The Contracts4Biz Website Terms and Conditions and Privacy Policy template is drafted by SchoemanLaw Inc., complies fully with POPIA and the Consumer Protection Act, and is written in plain language that your visitors can actually read and understand.
It covers both documents in a single, integrated template — designed specifically for South African businesses.
Learn more about the Website Terms and Conditions and Privacy Policy on the Contracts4Biz website.
If your website is live and you do not have compliant legal documents in place, this is the one to sort out today.