Your Business Website Has Two Legal Requirements — Do You Have Both?

Most South African business owners know they should probably have a Privacy Policy on their website.

Fewer know that they also need Website Terms and Conditions.

And many who have both are still using documents copied from another website years ago — documents that may not comply with current South African law.

Here is what your business website actually needs, and why it matters.

The Two Documents Every Business Website Must Have

1. Website Terms and Conditions

Website Terms and Conditions (sometimes called Terms of Use) is a legal agreement between you and anyone who visits or uses your website.

It sets the rules for how your site may be used, limits your liability for errors or third-party content, and establishes the basis on which any transactions or interactions take place.

Under the Consumer Protection Act (CPA) and the Electronic Communications and Transactions Act (ECTA), businesses that operate websites and e-commerce platforms have specific disclosure and consumer rights obligations.

Your Terms and Conditions are where those obligations are met.

Key clauses include:

Acceptable use — what visitors may and may not do on your site

Intellectual property — ownership of content, images, and materials

Disclaimer of warranties — limiting liability for the accuracy of information

Limitation of liability — capping what your business is responsible for

Governing law — confirming South African law applies

Dispute resolution

Privacy Policy

A Privacy Policy is a legal document that tells your website visitors what personal information you collect about them, why you collect it, how you use and store it, who you share it with, and what rights they have over it.

This is not optional.

Under POPIA (the Protection of Personal Information Act), any South African business that collects personal information — including names, email addresses, or phone numbers through a contact form — is required to inform visitors about how their data is processed.

A compliant Privacy Policy must cover:

What personal information is collected (including cookies and analytics data)

The purpose for which it is collected

Who it is shared with (including third-party tools like Google Analytics, email platforms, or payment processors)

How it is secured

How long it is retained

The rights of data subjects — to access, correct, or delete their information

How to lodge a complaint with the Information Regulator

Why “Borrowed” Policies Are Risky

Copying a Terms and Conditions or Privacy Policy from another website creates several problems.

First, it was written for their business, not yours.

Second, it may not comply with South African law at all if it was written for a different jurisdiction.

Third, it almost certainly does not reflect current POPIA requirements, which only came into full effect in 2021.

A policy that does not accurately describe how your business actually processes data is, in some respects, worse than no policy — because it actively misleads visitors about their rights.

The Contracts4Biz Solution

The Contracts4Biz Website Terms and Conditions and Privacy Policy template is drafted by SchoemanLaw Inc., complies fully with POPIA and the Consumer Protection Act, and is written in plain language that your visitors can actually read and understand.

It covers both documents in a single, integrated template — designed specifically for South African businesses.

Learn more about the Website Terms and Conditions and Privacy Policy on the Contracts4Biz website.

If your website is live and you do not have compliant legal documents in place, this is the one to sort out today.