Yes, Privacy Policies are ALWAYS required when a third-party service is used to collect analytical data from your visitors and website performance.

Should your website not be using a third party service to collect data, you are under no obligation to have a Privacy Policy in place. However, it is considered good web business practice to have a Privacy Policy page for transparency purposes, which actually states ‘that no personal data is collected,’ etc..

Please be aware that some third-party services; e.g. Google Analytics use cookies to collect information about visitors (and their online behaviour) to your website, have a Privacy Policy as a Term of Service and will require you to have it on your website. Similarly, Google Adsense also requires you to have a legally compliant Privacy Policy on your website.

You can upload your Privacy Policy on WordPress, by selecting Privacy under the Settings menu. WordPress also has a Guide as to recommendations for the content you would need to include in your Privacy Policy, as well as any requirements for your theme and plugins you have installed via WordPress.

It is the responsibility of the website owner to ensure that their Privacy Policy has the required information on it and that it is accurate and up to date.