A privacy policy should explain what personal information your site collects, why it uses that information, who receives it, and how people can exercise applicable privacy choices. WordPress and Shopify provide different publishing tools, but neither can know every plugin, app, or workflow in your business.
This guide walks through the actual admin paths, storefront placement, and checks to make before publishing. If you are still drafting the text, start with our guide to what a website privacy policy should include.
Before you publish: inventory your data
List every place where information enters or leaves the site. Check contact forms, analytics tags, newsletters, orders, accounts, comments, chat widgets, embedded media, and app or plugin settings. For each one, record the data involved, its purpose, any service provider, and how long your business keeps it. This inventory makes a policy specific instead of generic.
| Touchpoint | What to identify | Where to check |
|---|---|---|
| Contact and signup forms | Name, email, message, consent choice | Form plugin, CRM, email service |
| Analytics and advertising | Identifiers, events, device data | Analytics tool, pixels, ad partners |
| Orders and accounts | Contact, order, address, payment-related data | Shopify, payment and fulfillment partners |
| Comments and embedded media | Comment details, IP data, third-party requests | WordPress, video and social embeds |
| Support and returns | Messages, order reference, complaint details | Help desk, returns app |
The charts below are a fictional 12 touchpoint example showing how a site owner could track policy coverage. They are not survey results or a recommended target.
Text equivalent: The sample has 3 form, 3 analytics, 4 store, and 2 embed touchpoints. Of the 12 total, 7 are documented, 3 need verification, and 2 are not yet disclosed. The last 5 would be investigated before publication.
WordPress vs Shopify at a glance
| Task | WordPress | Shopify |
|---|---|---|
| Create or select policy | Settings → Privacy | Settings → Policies; customer privacy controls are under Settings → Customer privacy |
| Edit content | Edit the selected page in Pages | Edit the privacy policy in the policy editor or automated privacy settings |
| Public placement | Add or confirm a footer/menu link in your theme | Checkout footer links appear after saving; add a storefront menu link separately |
| Main review risk | Themes, plugins, forms, and embedded services | Apps, checkout, marketing, fulfillment, and regional settings |
WordPress route
Choose the policy page → edit disclosures → publish → link it in the theme → test.
Shopify route
Review policy settings → save accurate text → add storefront menu link → test checkout and store.
How to add a privacy policy in WordPress
WordPress provides a privacy settings screen and a starter page. Its official Privacy settings instructions explain how to create a page or select an existing one. The suggested text is a starting point; you are responsible for tailoring it to your site.
- 1
Open Settings → Privacy
In the WordPress dashboard, create a new Privacy Policy page or select an existing page and choose Use This Page.
- 2
Edit the page
Open the policy in Pages. Replace generic suggestions with your actual collection, purposes, sharing, retention, rights, and contact details.
- 3
Review themes and plugins
Check forms, comments, ecommerce plugins, analytics, embedded content, newsletters, and security tools for disclosures you need to add.
- 4
Publish and link it
Publish the page, then add or confirm a footer or legal menu link using your theme’s menu or site editor. Theme behavior varies.
- 5
Test as a visitor
Open the public site on desktop and mobile, follow the policy link, and check forms and registration flows for consistent notices.
Selecting a WordPress privacy page does not guarantee that every theme displays a sitewide footer link. Check the live site yourself.
How to add a privacy policy in Shopify
Shopify’s store policy documentation describes Settings → Policies and the separate storefront menu step. Shopify can supply template or automated text, but merchants remain responsible for the accuracy of their published policy.
- 1
Open Settings → Policies
In Shopify admin, choose Privacy policy in Written policies. Enter or review the text and save it.
- 2
Check Customer privacy settings
Review Settings → Customer privacy for automated policy, cookie banner, and data sharing settings. Verify that any automated content reflects your store.
- 3
Customize store-specific disclosures
Check checkout, customer accounts, email and SMS marketing, apps, analytics pixels, fulfillment, returns, and international selling.
- 4
Add a storefront menu link
Go to Content → Menus, open the menu used by your footer, add a menu item linking to the saved privacy policy, and save the menu.
- 5
Verify both experiences
Check the online store footer and checkout footer on desktop and mobile. Confirm the policy link opens the intended page.
Shopify links saved policies in the checkout footer. A storefront footer link depends on the menu and theme configuration, so verify it separately.
Where the policy link belongs
Give visitors a consistent route to the policy from the footer. Also consider the moments when people provide information: signup forms, account creation, contact forms, and checkout. The right location depends on the flow and the applicable notice requirements.
Site footer
A stable link on every public page.
Forms
A nearby link when visitors submit information.
Checkout
A route for customers before completing an order.
Accounts
A route near registration and account settings.
For more placement patterns, see where to display legal policies on a website. If you use analytics or advertising cookies, also review our cookie policy guide for the separate notice and choice issues.
Use a generator responsibly
A generator can structure a first draft quickly. It cannot inspect every script, vendor, plugin, app, or retention practice on your site. Compare its output with the inventory you made above before you publish.
Generate
Enter your business, platform, collection, and contact details.
Verify
Match every disclosure to live forms, apps, plugins, pixels, and providers.
Publish
Add the final text in the platform and test the public link.
Use our free privacy policy generator for the draft, then follow the more detailed privacy policy writing guide to review it. Sites with user submissions may also need a moderation policy, and sites handling copyright complaints can read when and why a DMCA policy matters.
Review and maintain the page
Assign an owner for policy changes. When a new app, plugin, form, pixel, payment option, fulfillment partner, or market changes data handling, compare the live behavior with the published text. Update related notices and controls as needed, then test the public page again.
Change triggers
- New analytics, advertising, or email tools.
- New checkout, account, delivery, or support workflows.
- Changes to retention, sharing, contact details, or privacy choices.
Final publication check
- The policy matches the live site and names real service categories.
- Links work from storefront, forms, and checkout where added.
- The page is readable and usable on a narrow screen.
Common mistakes to avoid
| Mistake | Better approach |
|---|---|
| Publishing untouched platform template text. | Check every disclosure against your actual tools and data flows. |
| Assuming the page is linked everywhere. | Test the storefront and checkout links separately. |
| Treating the policy as a cookie control. | Configure separate notice and choice controls where applicable. |
| Displaying an automatic “updated” year. | Record a date only after a real content review. |
| Forgetting app and plugin changes. | Include privacy review in the workflow for new integrations. |
Frequently asked questions
Does WordPress create a complete privacy policy automatically?
No. WordPress can create a starter page and show suggested text, but the site owner must verify the disclosures against themes, plugins, forms, analytics, and actual data practices.
Does Shopify add the policy link to my storefront footer automatically?
Shopify links saved policies in the checkout footer. To show a privacy policy link in your online store footer, add it to the appropriate menu and confirm that your theme displays that menu.
Can I use a generated or automated privacy policy?
Yes, as a starting point. Review it against your actual data collection, vendors, marketing, retention, and customer rights process. Shopify automated text also needs merchant review.
Is a privacy policy the same as a cookie banner?
No. A policy explains data practices; a banner or preferences interface can provide notice and choices where required. Configure each for the laws and technologies that apply to your site.
When should I update the policy?
Review it after meaningful changes to forms, apps, plugins, analytics, payments, marketing, fulfillment, or the markets you serve. Record a review date only after an actual review.
Make the policy accurate and easy to find
Inventory your data, customize the draft, publish it through the correct platform setting, and verify the live links. Start with the Privacy Policy Generator.