Working out what applies.
A NOTE FIRST
This is general guidance, not legal advice. For anything significant, take proper advice.
Visit zillionkinghost.com for further information.
ALMOST EVERY SITE NEEDS
A privacy notice, if you collect any personal data. A contact form counts. Analytics counts.
IF YOU SELL ANYTHING
Terms and conditions A returns and refunds policy Delivery information
IF YOU USE COOKIES BEYOND ESSENTIAL ONES
A cookie notice, and in some jurisdictions a consent mechanism.
IF YOU HAVE USER ACCOUNTS OR USER CONTENT
Terms of use covering acceptable behaviour.
WHAT MOST SMALL BUSINESS SITES ACTUALLY NEED
A privacy notice and, if selling, terms and a returns policy.
Three pages.
WHAT NOT TO DO
Copy another business's pages. They describe that business, not yours, and may commit you to things you do not do.
WHERE TO PUT THEM
Linked from the footer of every page, and at the point they matter: at checkout, beside a form.