Website Acceptable Use Policy

What is an acceptable use policy?

A website acceptable use policy (also known as an AUP) explains how website users can gain access to and use a website. This policy can be used by website operators that are based in the United Kingdom.

What are the differences between terms and conditions of use and an acceptable use policy?

The purpose of an acceptable use policy is to set out the standards and rules that website users must comply with whenever they use or access the website. This type of policy document is not legally binding.

The terms and conditions of use will create a binding contract with the website user. The terms and conditions will often refer to and incorporate an acceptable use policy.

Is it mandatory to have this kind of policy?

No, it is not mandatory to hold this kind of policy. It is however sensible and best practice to have a policy of this nature. Online safety laws are currently being updated so that website owners will soon have a duty of care to:

• prevent the use of their services for criminal activity
• safeguard children

What has to be done once the policy is ready?

The policy can be finalised and placed on the website, in an easily accessible location. The website operator should ensure that any terms and conditions of use refer to and provide a link to the policy.

What other documents might be required alongside the policy?

A website will need to hold other policies and documents, which refer to or may be read alongside the policy. This might include:

• a privacy policy
• a cookie policy
• terms and conditions of use
• terms and conditions of sale
• a complaints policy

Can all websites use the same type of policy?

This policy can be used for a variety of different websites. However, a website operator should consider whether it may need a specialist policy if it carries out activities that are regulated or restricted in some way. A regulatory body may impose certain requirements on a website, including certain acceptable use provisions which should be used.

Websites that are aimed towards children should consider specialist advice.

How long should the policy last for?

The policy can remain in place indefinitely. The website operator should ensure the policy is updated from time to time to make sure that the information is accurate and in line with all relevant legal provisions.

What should the policy contain?

The policy should:

• provide contact details for the website operator
• explain what the purpose of the policy is
• list the ways in which the website may be used (permitted use)
• list the ways in which the website should not be used (prohibited use)
• outline the expected content standards for posting on the website, where applicable
• explain what will happen if the policy is not adhered to
• explain how any disputes in relation to the policy will be dealt with

What laws apply to the policy?

The main legal frameworks applicable to the policy are:

• The Consumer Rights Act 2015
• The Company, Limited Liability Partnership and Business (Names and Trading Disclosures) Regulations 2015
• The Equality Act 2010
• The Contracts (Rights of Third Parties) Act 1999
• The Communications Act 2003
• The Online Safety Act 2023

The governing/supervisory body for upholding information rights is the Information Commissioner's Office (the ICO).

The Office of Communications (Ofcom) is the regulator for Online Safety.

Help from a lawyer

You can choose to consult a lawyer if you need help.

The lawyer can answer your questions or help you through the process. You will be offered this option when you complete the document.

How to modify the template?

You fill out a form. The document is created before your eyes as you respond to the questions.

At the end, you receive it in Word and PDF formats. You can modify it and reuse it.