Online privacy policies have come a long way as technology and buying habits have evolved, especially since social networking sites, search engines and businesses have come under fire for sharing user information without sufficient disclosure.
When drafting your web site’s policy, consider using simple language to answer the following questions.
What information do you collect? Outline the types of personal data you collect from customers. This includes home address, e-mail, phone numbers and credit card numbers.
How do you collect the information? Web sites collect information from customers in many different ways. Even if you don’t actually sell goods through your site, you might have an e-mail sign-up for a newsletter or application, or install cookies on the visitor’s computer to track activity. Disclose how data is being collected.
How do you use the information? Include background on how you share customer information with third parties, such as to process orders. If you sell customer information to marketers, explain what information is sold and how it could be used.
What control does the customer have over his or her personal information? Customers need a way to contact your business and control their personal data, whether it’s changing a password on their account or taking their name off of a mailing list. Plan to include a direct phone number or e-mail address that customers can use to manage their information with you.
How do you protect the information? Explain how you protect customer data, including, but not limited to, web site encryption, limiting employee access to sensitive customer data and server accuracy.
Angie Barnett is president and CEO of the Better Business Bureau of Greater Maryland. She can be reached at 410-347-3990 and [email protected].