What legal documents does a startup actually need?
Most founders don’t start with legal.
They start with the product, the brand, the website and then at some point, usually just before launch (or just after), the question comes up:
“What do I actually need in place legally?”
The honest answer is: less than you think but more than you can afford to ignore.
The short answer
If you’re launching a business, you’ll usually need:
Terms & Conditions
A Privacy Policy
A basic contract (if you’re working with clients or suppliers)
That’s your foundation.
Everything else builds from there.
What each one actually does (in plain English)
Terms & Conditions
These set the rules for how people use your business.
If you’re selling products or services, this is what protects you if:
a customer wants a refund
something goes wrong
expectations aren’t aligned
Without them, you’re relying on goodwill or worse, default consumer law with no structure around your offer.
Privacy Policy
If you collect any data (emails, contact forms, analytics), you legally need one.
This explains:
what data you collect
why you collect it
how you use it
It’s not just a compliance exercise, it’s about transparency and trust.
Contracts (clients / suppliers)
If money is changing hands, you need something in writing.
This doesn’t need to be complicated, but it should cover:
what’s being delivered
timelines
payment terms
what happens if things change
This is where most disputes come from…not bad intent, just unclear expectations.
Where most founders go wrong
We see the same patterns again and again:
Copying terms from another website
Using free templates without understanding them
Leaving things vague to “keep it simple”
It feels like a shortcut, but it usually creates risk later.
Because the issue isn’t just having documents,
it’s whether they actually reflect how your business operates.
So what’s “enough” at the start?
You don’t need a full legal suite on day one.
But you do need:
documents that match your business model
clarity on how you’re selling and operating
protection where it matters (money, data, delivery)
That’s the difference between “covered” and just “having something in place”.
A practical way to think about it
At launch: You’re putting the basics in place so you can operate properly.
As you grow: You refine and strengthen things as the complexity increases.
Where we typically come in
Most founders reach out at one of two points:
just before launch (to get things set up properly)
after something’s gone wrong (to fix it)
We built our starter packages for that first moment
to give you exactly what you need, without overcomplicating it.
This is general guidance designed to help you understand the landscape. It isn’t legal advice, and shouldn’t be relied on as such. If you need support specific to your business, we’re always happy to help.