Do Facebook Lead Ads Need a Privacy Policy?

A privacy policy tells people what you’ll do with their information, and Meta says it can help build trust with prospective and current customers. Meta’s lead ads article says every lead ad on Facebook or Instagram needs one, added as a URL in the form’s privacy policy section. You don’t need a special policy written for lead ads: an existing one for your business works, as long as the link doesn’t go straight to a PDF, image or download and the policy is accurate and honest.

Is a privacy policy really required?

Meta’s articles don’t all say the same thing, so here is exactly what each one says:

• “About privacy policies for lead ads”: “A privacy policy is required to run a lead ad on Facebook or Instagram.”
• “About lead ads with instant form”: lists the form section as “Privacy policy (optional)”, then says in the same line that “a privacy policy is required to run instant forms on Facebook or Instagram.”
• “Create a lead ad with instant form in Meta Ads Manager”: marks both the before-you-begin item (“you can add a privacy policy URL”) and the privacy policy step as “(optional)”.
• “Create a lead ad with instant form from Meta Business Suite”: says to make sure you have your organization’s privacy policy URL to include in your form.

What are the rules for the link?

Rule	What Meta says
Format	The link can’t go directly to a PDF file, an image or a direct download
Reuse	You can use an existing privacy policy URL for your business or service
Custom version	You don’t have to create a custom privacy policy for lead ads
Content	The policy should be accurate and honest
Messenger lead flows	You attach a privacy policy link before saving the question template

What should your privacy policy cover?

Meta suggests these topics:

1. The kind of information you collect.
2. How you use it.
3. Whether you share it with affiliates or third parties.
4. Whether customers can review or delete what you hold about them.
5. How you respond to legal requests.
6. How you tell customers about changes to your privacy practices.
7. How customers can contact you with questions.
8. The policy’s effective date.

Meta also suggests posting it somewhere easy to find, such as your website footer or your app’s settings menu, and checking local laws for any rules on where or how it must appear.

Where do you add it to an instant form?

1. In the form editor, open the Privacy policy section.
2. Enter your privacy policy URL and the link text people will see.
3. Optionally click + Add custom disclaimer to add extra notices, such as marketing opt-ins and legal disclaimers.

What else limits how you use the data?

When you add prefill questions, you describe how the information you collect will be used or shared. Meta says you may only use the information you collect for the purposes stated in that notice. Before building the form, Meta advises having your legal team review your questions, the lead ads terms and Meta’s Advertising Standards.

FAQ

Can I link my privacy policy as a PDF?

No. Meta says your privacy policy can’t link directly to a PDF file, an image or a direct download. Meta also says you can use an existing privacy policy URL for your business. In the form’s privacy policy section, you add that URL and your link text.

Do I need a separate privacy policy for lead ads?

No. Meta says you can use an existing privacy policy URL you already have for your business or service and don’t need to write a custom one for lead ads. Meta suggests it covers topics such as the kind of information you collect and how you use it.

How do I add marketing consent to the form?

Use a custom disclaimer. In the form editor, click + Add custom disclaimer to add notices such as marketing opt-ins and legal disclaimers. When you build the form in Meta Business Suite, Meta says custom disclaimers have no character limit.