Yes. In the UK, we are governed by the General Data Protection Regulation (GDPR). A website designer, under the GDPR, is what is known as a “controller”. Likewise, a website visitor is, or potentially is, a data subject.
Under the GDPR, the controller has strict responsibilities to the data and to the data subject. Transparency is one of the responsibilities; the data subject must be aware of their rights and how their data is being used. Transparency is achieved with a thorough Privacy Policy.
