How to Set Up and Maintain Your WordPress Privacy Policy Page

Learn how to create, assign, and keep your WordPress privacy policy page up to date so your visitors understand how their data is handled.

Why Your WordPress Site Needs a Privacy Policy Page

Any website that collects personal data (for example, contact forms, comments, analytics, or email signups) should publish a clear privacy policy. Many laws worldwide require it, and users increasingly expect to see it before they share information. A dedicated privacy policy page explains what you collect, why, how long you keep it, and who you share it with.Source

Overview: What the WordPress Privacy Settings Do

WordPress includes a built-in Privacy Settings screen where you can:

• Create a new privacy policy page from a starter template.
• Assign an existing page as the official privacy policy.
• Ensure the page is used in core locations such as the login and registration screens.

This tool does not write your policy for you, but it gives you a structured starting point and reminds you to keep it accurate and current.Source

Step 1: Plan What Your Privacy Policy Must Cover

Before you touch WordPress, list the types of data your site collects. Typical items include:

• Contact form submissions (name, email, message).
• Newsletter signups.
• Comments and user accounts.
• Analytics and tracking (IP addresses, page views, device data).
• Ecommerce data (billing details, shipping addresses, order history).

For each item, document:

• What you collect.
• Why you collect it.
• How long you keep it and how users can request deletion.
• Which third parties (if any) receive the data.

This internal list becomes the backbone of your published policy and helps you avoid collecting more data than you actually need.Source

Step 2: Create or Assign the Privacy Policy Page in WordPress

Using the WordPress Privacy Settings Tool

1. Log in to your WordPress Dashboard as an Administrator.
2. Go to Settings ? Privacy.
3. Under Privacy Policy page, choose one of the following:
   • Create New Page – WordPress will generate a draft page titled “Privacy Policy” with suggested sections.
   • Use This Page – Select an existing page from the dropdown, then click Use This Page.
4. If you created a new page, click Edit to open it in the block editor and customize the content.
5. When you are satisfied, click Publish (or Update if it was already published).

The page you select here becomes the official privacy policy page that WordPress and compatible themes can link to automatically.Source

What You Should See

• On Settings ? Privacy, the dropdown should show your chosen page title, with a message confirming it is set as the site’s privacy policy page.
• When you view the page on the front end, the URL should be stable (for example, /privacy-policy/) and the content should reflect your actual data practices.
• On the login or registration screens, a small “Privacy Policy” link should appear, pointing to this page.

Step 3: Add the Privacy Policy Link to Your Navigation and Footer

Most visitors expect to find the privacy policy in the footer on every page, and sometimes in the main navigation.

Add to a Menu (Block Theme or Classic Theme)

1. In the Dashboard, go to Appearance ? Editor (for block themes) or Appearance ? Menus (for classic themes).
2. Select the footer navigation area or the specific menu you want to edit.
3. Add a new item and choose your published privacy policy page from the list of pages.
4. Save or publish the changes.

Add to a Footer Template with Elementor

1. Go to Templates ? Theme Builder in your Dashboard.
2. Edit your Footer template with Elementor.
3. Drag a Nav Menu or Text Editor widget into the footer area.
4. If using a Nav Menu, ensure the menu includes the privacy policy page. If using text, type “Privacy Policy,” highlight it, and link it to your policy page.
5. Click Update to save the template.

What You Should See

• A clearly labeled “Privacy Policy” link in your site footer on every page.
• The link opens the correct privacy policy page in the same tab.
• The text is readable and accessible (sufficient contrast, not too small).

Step 4: Customize the Content of Your Privacy Policy

WordPress’s starter template includes suggested sections for common data types such as comments, media, contact forms, cookies, analytics, and ecommerce. You should:

• Remove sections that do not apply to your site.
• Add details for any additional plugins or services that collect data (for example, CRM tools, live chat, or marketing platforms).
• Use plain language so non-technical visitors can understand what happens to their data.

For each plugin or service that handles personal data, check its documentation to see what it collects and how it processes information, then summarize that in your own policy.

What You Should See

• The policy is specific to your site—no placeholder text or obviously generic language.
• Each type of data mentioned in your forms, checkout, or user account areas is also described in the policy.
• There is a clear way for users to contact you about privacy questions or data removal requests.

Step 5: Keep Your Privacy Policy Accurate Over Time

Your privacy policy is not a one-time task. Any time you add a new feature that collects data—such as a new form, analytics tool, or third-party integration—you should:

• Update your internal data inventory.
• Review whether you can minimize or anonymize the data collected.
• Revise the privacy policy page to describe the new collection and any sharing.

It is a good practice to schedule a recurring review (for example, quarterly) to confirm that the policy still matches how your site actually works.Source

Step 6: Use Site Health to Support a Safer Environment

While the Site Health tool does not manage privacy settings directly, it helps you maintain a secure and up-to-date WordPress installation, which is essential for protecting user data.

1. Go to Tools ? Site Health in your Dashboard.
2. On the Status tab, review any Critical issues or Recommended improvements and follow the suggested fixes.
3. Use the Info tab to see technical details about your site when working with your developer or hosting provider.

Resolving Site Health issues—such as outdated PHP versions, inactive plugins, or missing HTTPS—reduces the risk of data exposure and supports the promises you make in your privacy policy.Source

Step 7: Make the Policy Easy to Understand

Even if your legal team provides formal wording, consider adding a short, user-friendly summary near the top of the page that explains in plain terms:

• What information you collect.
• How you use it (for example, to respond to inquiries, process orders, or improve the site).
• How users can opt out of marketing or request data deletion.

Clear, honest communication builds trust and can increase the likelihood that visitors will complete forms or purchases on your site.Source

Quick Checklist

• You have identified all the ways your site collects personal data.
• Settings ? Privacy shows the correct privacy policy page.
• The privacy policy link appears in your footer and on login/registration screens.
• The content is specific, accurate, and written in language your visitors can understand.
• You review and update the policy whenever your site’s data collection changes.