CalOPPA privacy policy (any size)
The California Online Privacy Protection Act requires any commercial website that collects personally identifiable information from California residents, such as a contact form, to post a conspicuous privacy policy. It has no size threshold. Your attorney confirms whether it applies to you.