# WEB-045 — A privacy policy must be reachable from the website

> The brand website must link to a reachable privacy policy.

- **Rule ID:** WEB-045
- **Layer:** Website (`WEBSITE`)
- **Checks:** `brand website`
- **Severity:** BLOCKING — Breaking this rule gets the submission rejected outright.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** AI judgement over the crawled website or policy page
- **Fix type:** Fix the website — no form edit clears it
- **Required by:** CTIA, TCR, Twilio, Bandwidth
- **Applies:** Applies to every 10DLC registration.
- **Canonical URL:** https://ekas.io/rules/10dlc/website/web-045/

## Why this rule exists

Reviewers navigate from the site to the policy rather than trusting the URL field alone, and a policy that exists but is unlinked reads as one created solely for the registration. CTIA also requires it to be reachable from the call to action.

## How to fix it

Link the privacy policy from the site footer and from the opt-in surface.