Yes. Since you are collecting personal information (e.g. name and email on your contact form), you are required to have a Privacy Policy. Currently, the following laws require Privacy Policies for most websites:
- General Data Protection Regulation (GDPR);
- UK Data Protection Act 2018;
- California Online Privacy and Protection Act of 2003 (CalOPPA);
- California Privacy Protection Act (CCPA);
- Personal Information Protection and Electronic Documents Act (PIPEDA);
- Delaware Online Privacy and Protection Act (DOPPA);
- Nevada Revised Statutes Chapter 603A;
There are also about a dozen other states that are proposing their own privacy laws that would require most businesses to have a Privacy Policy and would affect how that Privacy Policy is written, requiring you to make changes on a pretty regular basis.