Does my website need a privacy policy in the UK? Almost certainly. What UK GDPR requires it to say, how cookies fit in, and the ICO fee most firms forget.