Privacy Policy 

Must include:

• What personal data you collect
• Why you collect it
• Legal basis under UK GDPR
• How long data is stored
• Customer rights
• Cookie usage
• Contact details for data requests

For a UK business, I strongly recommend having a solicitor review the final legal policies before launch, especially the Privacy Policy and Returns Policy, to ensure compliance with the latest UK consumer protection and UK GDPR requirements.