What is a Privacy Policy?
A privacy policy is a legal document provided by Information Security and forensic Center that explains the types of personal data collected from customers, for what purpose, and how data is processed.
Why and how should I assess this?
The primary purpose of a privacy policy is to provide information to customers and website visitors about what happens with their data and why it is collected. Moreover, having a privacy policy is required by law.
Any privacy policy should include:
-
The information collected by the company from its customers and users
-
Purposes for which the data is processed
-
The legal basis for the processing
-
Whether data is shared with third parties
-
Where and for how long data is stored
-
Description of the data subject rights
-
Notification about any changes made to the privacy policy