What is a privacy policy?
A privacy policy is a policy to the public explaining the way the company collects and uses the personal information. In addition, the policy includes directions for the user to request personal information to be changed, corrected, or removed. Under certain regulations, there may be addition sections to the privacy policy to be compliant with a specific region. A template may be purchased in the shop, click here.
It is necessary?
A privacy policy is one of the most needed agreement on a website. As new regulations are developing, the regulations are requiring companies to become more transparent about their data and privacy practices. If a company is not compliant with privacy regulations, the company may be subject to fines and penalties determined by the respective authorities.
Components to a privacy policy
Introduction: Like most agreements, the privacy policy should have an introduction of what the policy is about.
Information collected and how it is collected: This section lists out categories of information that may be deemed personal information. For example, certain businesses will collect the names, addresses, e-mail, phone number, social media accounts, etc. of their customers. In addition, the policy should explain to the customers the way the information is collected. For example, the company collects personal information when it is provided to the company or automatically through the website. Customers will typically provide the company with their personal information when they are registering for the website or purchasing a product. In addition, most websites will automatically collect information through certain analytics, cookies, web beacons, etc.
How information is used: This section lists out the ways the company will use the information. The section should include whether the company sells or shares the data through third party services, for marketing purposes, to fulfill the purposes stated upon collecting the data. In addition, the company may explain how information is disclosed to partners of the company or related to certain laws that require disclosure.
Choices about your information: This section provides information on deciding to limit the company in how the company uses the information. The company will provide some directions for the customer to request the company to stop selling their data or remove their data.
Accessing and correcting your information: This section provides directions on how to access and correct the information provided to the company.
Minors: This section sets out the age requirement for using the website. As there are regulations relating to children of certain ages, there are addition steps a company may have to take relating to children’s personal information.
Other regions: Certain regions have their addition requirements. In addition to the sections listed above, a company may be required to include an additional notice or statement that apply to citizens of a certain region. For example, California requires an additional a notice to California residents providing additional information relating to categories of personal information and rights under the regulation.
Contact information: This section provides the contact information for questions related to the policy.