Privacy Policy & Commerce Law Notice Kit

When this helps

You want to tidy up your site's legal pages, but a copied template leaves outdated wording and unused data fields in place

What it does

Builds the privacy policy, commerce law notice, external-transmission disclosure, and final-confirmation-screen text that an online shop, booking site or membership site needs to display, just by answering a few questions. It never writes about data you don't collect or services you don't use — anything you haven't answered stays marked as a blank to fix. If a current page exists, it is checked first for half-filled placeholders, phrasing like "ships when restocked" or "handled case by case," wording that predates the April 2022 revision, and missing address or phone fields. After you paste the new text onto your site, it checks again for any mismatch with what you answered.

The fixes baked into this kit

1. A half-filled field was left live on a published pageA commerce notice still read "Email: fill in address" on a live site. Placeholders such as blanks, circles, or XXX are now flagged as a fix needed (a digit written as a circle, as in a year, is not flagged).
2. A way of omitting address and phone was misread"We'll bill you when you order" was mistaken for wording that omits address and phone. Now only phrasing like "notified on request" counts as that, and forms like head office, postal code, or phone number are also counted as present.
3. A disclaimer sentence was misread as collecting card numbersSentences such as "we do not retain card numbers" were being read as evidence that card numbers are collected. Disclaimer sentences are now excluded from that check.
4. A leftover opt-out clause was still presentA clause allowing third-party disclosure without consent remained from a template, without the required filing in place. This is now flagged for confirmation and never included in the generated text.
5. A missing country name went unnoticedA page said only "includes an overseas provider" with no country named. When overseas data handling is mentioned without naming the country, it is now flagged for confirmation.
6. A monthly service had no cancellation termsA commerce notice for a monthly service had no delivery timing or cancellation terms. A subscription service missing cancellation terms is now flagged as a fix needed.

What's inside

• A tool that builds the privacy policy, commerce law notice, external-transmission disclosure, and final-confirmation text from your answers
• A tool that checks your current site pages for half-filled text, outdated wording, external-transmission tags, and input fields
• A rule that never writes data you don't collect or services you don't use (unanswered items stay marked as a blank to fix)
• A re-read step that catches internal-memo-style wording left in the finished text
• Detection for prompt-injection-style text hidden in a page, which it reports instead of following
• A sourced, dated log of which law articles and guidelines each requirement is based on
• A runnable sample (a glassware shop and a chiropractic clinic) to try the whole flow

The first three decisions

1. Sole proprietor or company (give the official name too)
2. What the site does (online sales, bookings, membership, etc.)
3. Whether a privacy policy or commerce notice page already exists

What you need

• No extra costClaude Code or CodexBoth CLAUDE.md and AGENTS.md are included
• No extra costNode.js 18 or newerNeeded to run the tools. Nothing else to install
• No extra costA browserTo view the result page and the generated text

How to use

Just paste this into your AI.

I want to use the nice to have kit "Privacy Policy & Commerce Law Notice Kit". Follow https://nicetohave.app/en/g/WPD2R4HP-•••••••••• and set it up.

Works the same in Claude Code or Codex.
Read what this tells your AI to do, before you paste it

FAQ

Can a sole proprietor who doesn't want to publish a home address still use this?

Yes. The commerce law notice can omit address and phone by promising to disclose them on request without delay (all fees must still be listed, and a real way to respond is required). A trade name alone isn't enough — your registered legal name is required, and a PO box can't be used.

Does every site need the external-transmission disclosure?

Per the Ministry of Internal Affairs' guidance, a shop's own online sales, in-store booking, or a company homepage are not expected to be covered. Sites hosting other people's posts or listings may be, so that case is flagged for confirmation.

Can I just check my current pages without generating anything?

Yes. Paste in the text, or hand over a saved page or site folder, and it reports what needs fixing or confirming without you going through the generation flow.

Can I change the wording of the generated text?

The wording is meant to stay as the tool writes it. If you need to change it, do so after pasting it onto your site, then run the check again.

How does this handle the upcoming revision to Japan's Personal Information Protection Act?

It's built on the rules in effect before that revision starts. Once the government-set start date passes (July 16, 2028 at the latest), the result page shows a prompt at the top to re-check the wording. It doesn't stop you from working.

Supporters

Once support opens, the people who backed this kit will be listed here.