If you collect or use personal information, you will legally need to have a Privacy Policy. While not legally required, you should also have the following legal documents if relevant: a Terms and Conditions agreement, disclaimers, and a Return and Refund Policy.