Hot answers tagged

16

The Better Business Bureau Online has a Sample Privacy Notice which is as good as any in terms of a simple, but thorough policy. It has these sections: Our Commitment To Privacy The Information We Collect How We Use Information Our Commitment To Data Security Our Commitment To Children's Privacy How To Access Or Correct Your Information How To Contact Us ...


5

If you are applying for a merchant account this is a common requirement of the merchant account provider as this helps them to understand your business model and determine the risk they will be exposed to (e.g. chargebacks). Basically, the more customer friendly they are the less risk they are exposed to. Privacy policies are good to have as some users, ...


4

Depending on the country/state you're sire is available in or services you are providing these may be required by law there. California requires a specific privacy policy term that most websites break off as it's own additional policy for CA residents. If you're gathering any data on your users without informing them you are there is the potential for them ...


4

The excellent resouce artlung provided to the BBB website link is now moved. This was the closest thing I could find: http://www.bbb.org/us/WWWRoot/SitePage.aspx?site=70&id=a17891ea-ce8e-48d7-a27a-e6d2e5833cea Linked within is a set of tips on how to create your privacy policy: http://www.bbbonline.org/UnderstandingPrivacy/PMRC/createpolicy.asp Here ...


4

You're subject to the laws of the Country where your business is legally based and/or bases the operations. Cross-country legal enforcement (privacy in particular) lives in a grey area and - for example - big companies like Facebook or Google do not always comply with EU privacy laws. For EU companies, servers' location only matters in case you move the data ...


4

If your site is handling personal data then it must (i.e. its practices for handling personal data must) comply with EU data protection laws (see the EU Data Protection Directive 95/46/EC for the definition of personal data). However, there is nowhere in the European Union a requirement for a website to have its privacy policy posted - except for "cookies". ...


3

"Does my website have to publish a privacy policy?" What Gisle Hannemyr's comment states might be misleading. Technically speaking you need to inform your users, but the standard way to do so is by having a privacy policy posted on your website. As further addition, consider that the California Online Privacy Protection Act (in practice reflecting on any ...


3

You didn't mention if you gonna have English visitors too or not, but these legal information is meant to be accessible for your visitors, what is point of having it on your website if your users can't understand it?! Your website should provide the necessary legal information for all targeted visitors. Since all mentioned targets are EU members, your ...


3

Updating with some new answers, since the law is changing fast in this area: Docracy has open sourced its own terms and various privacy policies specific to mobile apps, annotations included. We also published a drafting guide. Other companies that famously allow intelligent copying of their terms are Quora and Wordpress. There are some free and paid privacy ...


3

This is just my opinion but I would say any site that allows visitors to interact should have a privacy policy and terms of use page. There are really 3 kinds of sites that go from least to most well documented in my mind. Sites that allow visitor interaction like posting comments without an account Sites that allow visitors to create accounts and ...


3

The Google Analytics terms of service actually require you to do that: You must post a Privacy Policy and that Privacy Policy must provide notice of Your use of cookies that are used to collect data. You must disclose the use of Google Analytics, and how it collects and processes data.


2

Terms of Services and Privacy Policies depend on the legal entity behind a website. They shouldn't be done based on how domain or subdomain are structured. I mean: if your forum is managed and owned by the same entity of the main domain, you don't need to have them separate. It's enough to have 1 privacy policy and 1 terms of service page. But remember ...


2

In some cases, like for example Affiliate Marketing, it is required by law in the USA to disclose such information on your website. As this article on the Washington Post explains.


2

Google just changed its privacy policies (so there might still be inconsistencies). here's an email I received from google a few days ago: Dear Google user, We're getting rid of over 60 different privacy policies across Google and replacing them with one that's a lot shorter and easier to read. Our new policy covers multiple products and features, ...


2

The question is if you're storing any information from users or not? I think if you're using FB you don't need to make users accept anything, but, generally when someone uses a site, they're agreeing to their terms, even if they don't accept anything literally. So IMO you should be fine as long as your privacy policy is accessible easily for all users.


2

If you use Adsense ads on your site, you are required by Google to have a privacy policy per the Adsense terms of service. From http://support.google.com/adsense/bin/answer.py?hl=en&answer=48182: AdSense publishers must have and abide by a privacy policy that discloses that third parties may be placing and reading cookies on your users' browsers, or ...


2

Why you don't generate one with one of the free tools available??, may take no more than half an hour, google for privacy policy generator. Kudos for coding your own forums, sometimes reinventing the wheel is good. !


2

The laws and acts that governs data protection and emailing various from country to country, while a lot of them change from country to country most say among the same thing and you will need to learn the key points of these and its far to many to list but for example. Not keeping peoples data on file for more than 2 years, you are responsible for safe ...


2

I'm the founder of a service for generating privacy policies, which happens to be based in Italy, so I know very well Italian laws on the topic. In your case and according to Italian laws, the Data Controller - Titolare del Trattamento in Italian - must be mentioned in the privacy policy (or by any other means of informing the data subject/user about its ...


2

In the U.S.? Nothing. Sorta. A privacy policy is a good idea and helps trust organizations such as eTrust evaluate your site for trust. It also helps the site user. I always read the privacy policy when any account or PII (personally identifiable information) is taken. The exception is where a site engages in marketing and serving to children 13 and under. ...


1

DISCLAIMER: I am not a lawyer and this is not legal advice. For legal advice, get a lawyer. First, it is against the Google Analytics TOS to identify users through it. (See cutroni.com). Even without that, you need a user's permission to store their personal data. If you have something that covers that in your privacy policy, you may be ok. I don't know EU ...


1

Here's where it gets tricky: You can't identify individual users in Google Analytics for Personal Identifable Information. (PII). However, if you already explicitly storing user data you can 'do the math' on it and identify the User's individual behaviour (i.e. users who have been on page orderid=211, you can view that user's behaviour with simple analytics ...


1

Probably, yes. However, it is only one page so by itself it won't hurt you. If you have lots of pages with duplicate/low quality content this just makes it worse by adding another page to the mix. You can always block that page from being crawled and indexed with robots.txt and x-robots.tag to prevent Google from considering that page in its algorithm or ...


1

I agree with closetnoc, full disclosure is the best policy (but keep it brief). The fact that you include GA on your site means that you are intending to use the data it collects, not to mention that Google gets to look at the data too. The privacy policy has to do with the users of your website, not where their private data is stored. Their data is being ...


1

On the one hand, Google probably doesn't want to index these pages on your site. Most of the words in these pages aren't going to be relevant to the rest of your site. If somebody searches for these words, your site will not make a great landing page. On the other hand, so many sites have these types of pages, that it isn't going to cause a problem for ...


1

No, it won't matter that much. Matt Cutts recommends not focusing too much on this, but on your content: http://www.youtube.com/watch?v=unEML5n5vTo


1

There are websites that generate the policy for you after filling some basic forms. Here is one of them. If there are no logins involved, you should be great with this one.


1

That depends on the country you live in. The country the server is in which hosts your site. If your country doesn't have strict privacy policy laws you don't need them. It's your server and anyone accessing it does at their own risk that you being the owner can do whatever you want with the data. The EFF has a good article on how bloggers (forums) are safe ...


1

Every website using Google Analytics is required to provide a privacy policy. You can generate a Google Analytics compliant privacy policy with iubenda: http://www.iubenda.com (I'm the founder ;) )



Only top voted, non community-wiki answers of a minimum length are eligible