Short answer: in France, a shop's website must at least show a legal notice (mentions légales: who publishes the site, who hosts it), a privacy policy if it collects data (form, booking) and, if it uses analytics or advertising cookies, a consent banner that follows the rules of the CNIL, the French data protection authority. If you sell online, you also need terms of sale.
This guide is a general checklist, not legal advice. For a specific case, ask a legal professional. Rules in other EU countries are similar but not identical.
The checklist
| Item | Required when | What it contains |
|---|---|---|
| Legal notice | Always | Name or company name, address, contact, SIRET or RCS number, publication director, host |
| Privacy policy | As soon as there is a form or booking | Data collected, purpose, retention, rights, contact |
| Cookie consent | If non-essential cookies (analytics, ads) | Free choice, refusing as easy as accepting |
| Terms of sale | If you sell online | Prices, delivery, withdrawal, payment, guarantees |
The legal notice in detail
For a company it usually includes: company name and legal form, share capital, registered office address, RCS or SIRET number, intra-EU VAT number, the publication director's name and the host's identity. For a sole trader the information is adapted (name, business address, SIRET).
About cookies
- Cookies strictly necessary for the site to work don't need consent.
- Analytics or advertising cookies generally require prior consent.
- The CNIL requires that refusing be as easy as accepting.
Tip: a site without tracking cookies doesn't need a banner. That is the default on our sites.
What about accessibility?
Since June 2025, new European accessibility rules apply to certain online services, including e-commerce. Micro-enterprises providing services are exempt. Either way, a readable site (contrast, alt text, keyboard navigation) is good practice.
FAQ
What is the risk without a legal notice?
A missing legal notice can be penalised. Above all, a site without one inspires less trust.
Is my Google profile enough to meet these obligations?
No, these obligations apply to your website. The Google profile has its own rules.
Are your websites compliant?
Our sites include a legal notice and privacy policy, with no tracking cookies by default. See the packages.