Use this when: your website has contact forms, booking forms, newsletter opt-ins, lead magnets, analytics tags, cookies, chat widgets, CRM routing, call tracking, AI summaries, customer photos, testimonials, or payment links. This is not legal advice and it is not a replacement for a qualified privacy policy. It is a fact-control checklist so your public pages do not overstate how data is collected, stored, shared, or protected.

Human-review rule: do not let AI invent privacy, security, compliance, consent, cookie, retention, deletion, or data-sharing claims. A responsible owner, manager, or qualified privacy/legal advisor should verify every public statement before it appears on a website, lead magnet, marketplace listing, or sales email.

1. Data collection points to inventory

Contact, quote, booking, support, lead magnet, newsletter, checkout, review, testimonial, survey, and chat forms.
Phone call tracking, SMS opt-ins, email follow-up tools, CRM fields, calendar booking links, and payment/deposit links.
Analytics, advertising pixels, heatmaps, cookies, embedded maps, video players, CAPTCHA/anti-spam tools, and third-party widgets.
AI tools that summarize inquiries, draft replies, score leads, analyze reviews, or generate website/listing copy from customer data.

2. Facts to verify before publishing

What information is collected, which fields are optional, and what the business uses it for.
Where submissions go, who reviews them, how long records are kept, and how customers can request corrections or deletion.
Which vendors receive data, whether sensitive information should be avoided, and what channels are not secure for private details.
Whether SMS/email consent, refund/cancellation, booking, warranty, accessibility, or privacy pages contradict each other.

Copy/paste privacy fact worksheet

Privacy and data-collection fact worksheet

Website/page being reviewed:
Primary owner/reviewer:
Forms and fields collected:
Optional fields:
Sensitive details customers should NOT send:
Where submissions route:
Who reviews submissions:
Tools/vendors that receive the data:
Analytics/cookies/pixels/widgets present:
SMS/email consent language:
Data retention rule or owner-reviewed placeholder:
Customer correction/deletion contact path:
Policy pages that must match:
Claims we can support:
Claims we must avoid:
Qualified reviewer needed? yes/no
Last verified date:
Next review date:

AI drafting prompt

You are helping a small business organize privacy and data-collection facts for a website page.
Use only the facts below. Do not invent legal rights, compliance status, security controls, cookie behavior, data retention periods, consent rules, vendor names, deletion promises, or privacy-policy language.

Facts:
[PASTE VERIFIED FACT WORKSHEET]

Draft a plain-language website note that says what the page collects, why it is collected, where the customer should not send sensitive details, and which policy page to review. Mark missing facts as [VERIFY]. Add a human-review checklist before publishing.

Stop-rule checklist before publishing

Stop if a privacy, cookie, consent, SMS, refund, booking, or checkout page gives different instructions from the page being edited.
Stop if the draft claims compliance with GDPR, CCPA/CPRA, HIPAA, SOC 2, PCI, accessibility, encryption, or security standards without verified evidence and qualified review.
Stop if AI summarizes customer names, contact details, addresses, job photos, health, finance, tenant, legal, or payment details into public copy.
Stop if customers could believe a normal contact form is a secure channel for passwords, payment card details, medical/legal/financial records, or emergency messages.

Why this helps AI search

AI answer engines often quote concise page-level explanations. If privacy and data-collection notes are vague or inconsistent, AI tools may flatten them into misleading promises. A reviewed worksheet helps the website state what is known, route buyers to the right policy page, and mark anything that requires expert review.

Pair this with the trust-center checklist, contact-page checklist, and lead-magnet landing page checklist.

For the full implementation system, see SEO After AI.