Missing legal pages while collecting personal data

[Harsh-goswami-103]

Problem

Footer links for Privacy Policy, Terms of Service, and Cookie Policy all point to href="#" (dead). Meanwhile the quote form collects name, email, business name, and project details.

Impact

• Collecting PII with no accessible privacy policy is a compliance risk (GDPR, India DPDP Act).
• Dead legal links erode trust and look broken.

Acceptance Criteria

• Add real Privacy Policy, Terms, and Cookie Policy content.
• Wire footer links to them.
• Add a consent/notice line near the form submit button.

Priority

High

[Digitload]

You're right, collecting PII without clear legal pages and a proper consent mechanism is a significant compliance risk under regulations like GDPR and India's DPDP Act. It also erodes user trust, as you pointed out.

The core issue is twofold:

1. Missing Legal Content & Links: You need to create the actual content for your Privacy Policy, Terms of Service, and Cookie Policy. Once those pages exist, update your footer links from href="#" to the correct URLs.
2. Lack of Consent/Notice for PII Collection: When collecting personal data via a form, you absolutely need to inform users and, in many cases, get their explicit consent.

For the consent part, you should add a clear notice or a checkbox near your form's submit button. This ensures users are aware of how their data will be used and agree to your policies. Here's a basic example:

<form ...>
  <!-- Your form fields -->
  <label>
    <input type="checkbox" name="privacy_consent" required>
    I agree to the <a href="/privacy-policy" target="_blank">Privacy Policy</a> and <a href="/terms-of-service" target="_blank">Terms of Service</a>.
  </label>
  <button type="submit">Submit</button>
</form>

For more complex scenarios, especially if this form submission triggers analytics, marketing tags, or other data processing that requires consent, you'll want a robust Consent Management Platform (CMP). This is where something like FitConsent comes in handy. It can help you manage user consent states across your site, ensuring that when users submit forms or interact with your site, their consent preferences for various data processing activities (like analytics or marketing) are properly recorded and respected, aligning with GDPR and other regulations. It also provides a clear, auditable record of consent.

You can find more details on how to ensure compliance with GDPR using a CMP in the FitConsent GDPR guide.