What you collect and why.
WHY YOU NEED ONE
If your site collects any personal data, including through a contact form or analytics, you have obligations under the NDPR in Nigeria and comparable frameworks elsewhere.
Visitors also expect one, and its absence looks careless.
WHAT TO COVER
What data you collect: form submissions, analytics, cookies, order details
Why you collect it How long you keep it
Who else has access: analytics providers, payment gateways, email services
How someone can ask what you hold, or ask for deletion How to contact you about it
BE SPECIFIC
Generic template text that does not describe what you actually do is close to useless.
If you use analytics, say so. If you use a payment gateway, say so.
WHERE TO PUT IT
Linked from the footer of every page, and from any form collecting data.
KEEPING IT CURRENT
Update it when you add a service that collects data. A notice describing last year's setup is inaccurate.
THIS IS GENERAL GUIDANCE
Not legal advice. Take proper advice for anything specific to your business.
