By business type

Terms & Conditions Generator for freelancers

Written for sole traders: client data, a portfolio site, and the processor role you did not know you had.

Generate your terms and conditions Read the terms and conditions guide

Freelance terms exist to end arguments about scope and payment. The clauses that earn their place are the ones covering revisions, late payment, kill fees and what happens to work in progress if the client disappears.

Freelancers are subject to the same data protection law as companies. There is no sole-trader exemption in UK GDPR, EU GDPR or most other regimes - the obligations scale with the processing, not with the headcount.

The two things freelancers most often miss are the processor relationship and the portfolio. If you handle a client’s customer data, you are a processor and need a written agreement. And if your portfolio shows client work containing personal data - screenshots with real names, testimonials, case studies - that is publication of personal data needing a basis and usually permission.

For UK freelancers there is also the ICO data protection fee, which applies to most sole traders processing personal data by automated means. It is enforced separately from any other obligation and is checked against a public register.

What a terms and conditions for a freelancer or consultant has to cover

Scope, deliverables and how many rounds of revision are included
Payment terms, deposits, late payment interest and suspension of work
Intellectual property transfer on final payment, and what you retain
Cancellation, kill fee and treatment of work in progress
Client responsibilities: materials, approvals and access

How a freelancer or consultant actually moves personal data

Client contact and project data

Names, emails, briefs and correspondence held in your inbox, project tool and invoicing system.

Client customer data accessed during work

Database exports, CRM access, mailing lists and analytics logins - the processor relationship most freelancers never document.

Portfolio and case study material

Screenshots, testimonials and results data, published on your own site.

Enquiry forms and lead magnets

A contact form or downloadable resource collects personal data with its own purpose and retention.

Invoicing and accounting tools

Client details in Xero, FreeAgent or QuickBooks, retained for statutory periods.

Subcontractors

Passing work to another freelancer makes them a sub-processor, needing a contract and usually the client’s authorisation.

Third parties the draft will ask you about

Google Workspace or Microsoft 365 · Xero, FreeAgent or QuickBooks · Stripe or PayPal · Notion or Trello · Calendly · Mailchimp · Dropbox

The rules that apply

No small-business exemption

UK and EU data protection law applies to sole traders. The Article 30 record-keeping exemption for under-250 staff is narrow and rarely applies in practice.

Processor agreements with clients

Required in writing wherever you handle client personal data on their instructions.

ICO data protection fee

Most UK sole traders processing personal data by automated means must register and pay the annual fee.

Portfolio and case study publication

Publishing client work containing personal data requires a basis and, in most cases, the client’s permission and the individuals’ awareness.

Invoicing and tax retention

Financial records must be kept for a statutory period, which is a lawful reason to retain some client data after a project ends.

What the generated terms and conditions contains

Who the contract is with and how it is formed
Your legal entity, and the exact moment acceptance happens - account creation, checkout, or continued use.
The service, the licence and its limits
What you are actually providing, what the user may do with it, and what they may not.
Price, payment, renewal and cancellation
Billing cycle, auto-renewal, price-change notice, and how either side ends the arrangement.
Acceptable use and enforcement
The behaviour that gets an account suspended, and the process you follow before you suspend it.
User content and intellectual property
Who owns what, the licence you need to run the service, and the takedown route for infringing material.
Warranties, liability and indemnity
Disclaimers that survive local consumer law, and caps that are actually enforceable rather than theatrically broad.
Governing law, jurisdiction and disputes
The law that applies, the courts that hear it, and any pre-litigation steps you require.

The freelance compliance minimum

Publish a privacy policy on your own site
Covering enquiries, clients, and any newsletter or lead magnet.
Add a processor clause to your standard contract
One reusable schedule, used with every client whose customer data you touch.
Register with the ICO if you are UK-based
Check the fee tier and set an annual reminder.
Get written permission for portfolio use
And redact personal data from screenshots.
Set a client data deletion routine
At project end, keeping only what tax law requires.
Separate business and personal accounts
It makes deletion possible and security statements true.

Where this usually goes wrong

Assuming sole traders are exempt

They are not. The obligations follow the processing.

No processor agreement with clients

Common, and it becomes visible the first time a client runs a compliance review.

Publishing client work without permission

Screenshots containing real customer names and testimonials attributed to identifiable people both need a basis.

Not paying the ICO fee

A separate legal duty in the UK, enforced independently, and checkable on a public register.

Keeping client data indefinitely after a project

Article 28 requires deletion or return at the end, with a carve-out only for what tax law requires.

Using a personal email account for client data

It undermines any security statement and complicates deletion.

Frequently asked questions

Do freelancers need a privacy policy?

Yes, if you collect personal data - and an enquiry form, a newsletter or a client list all count. There is no sole-trader exemption.

Do I need to register with the ICO?

Most UK sole traders processing personal data by automated means do, and must pay the annual data protection fee. The exemptions are narrow.

Can I show client work in my portfolio?

With the client’s permission, and with personal data removed or anonymised. Testimonials naming identifiable people need their awareness and a basis.

Am I a processor for my clients?

Whenever you handle their customer data on their instructions, yes - which means a written agreement is required.

Are terms and conditions legally binding?

They are when the user had a genuine opportunity to read them and took a positive step to accept. Clickwrap - a ticked box next to a visible link - holds up far more reliably than a "by using this site you agree" line in the footer.

What is the difference between terms of service and terms and conditions?

Nothing substantive. "Terms and conditions" is the more common phrasing in the UK and Commonwealth markets, "terms of service" in the US and in SaaS. The clauses do the same job.

Can I limit my liability to zero?

No. Most consumer regimes void attempts to exclude liability for death, personal injury or fraud, and unfair-terms rules strike out caps a court considers unreasonable. A cap that is drafted to survive review is worth more than one that is struck out entirely.

Do I need terms if I sell nothing?

If users can register, post, comment or upload, yes - the terms are what let you moderate, suspend and remove content without being in breach of contract yourself.