GDPR Privacy Policy

Businesses should not have to choose between an overpriced solution and one which is cheap but dangerous. It should be possible for businesses to have access to high quality legal documents for their website at an affordable price, with comprehensive guidance notes, which are instantly available for download via the internet. Choose GDPR Privacy Policy today.

Here are just a few of the issues we have come across when reviewing third parties’ website documentation, all of which risk exposing your business to serious fines, damages or can massively reduce the value of your business:

• The template has never actually been reviewed or approved by a qualified lawyer at any stage.
• The template only complies with certain laws that affect a business but not others e.g. extra-territorial laws such as the Californian Online Privacy Protection Act (CalOPPA) which can impose fines of up to $2,500 per breach.
• The template is overly complex and legalistic, breaching the requirement under Article 12 of the GDPR for a privacy policy to be “concise, transparent, intelligible” using “clear and plain language”.
• The template or service they used to prepare their policies was either overpriced, incomplete, insufficiently certain to ensure legal enforceability and/or lacked sufficient legal protection for the website owner.
• The documents did not fully set out acceptable uses of the website, failed to fully set out any practices in relation to the processing of personal data and/or are simply non-compliant with existing legislation under the Data Protection Act 1998 or new regulations introduced by the GDPR.
• The documents were too vague and lacked transparency (a legal requirement of the GDPR) e.g. stating that your information may be passed on to “third parties” without stating who those third parties are and/or implying that you can pass information on to all third parties without your users’ consent, or stating that users’ information will not be passed on to any third parties and thereby limiting the circumstances in which you can legitimately pass on users’ information to third parties, potentially damaging the value of their business, particularly in the event that the business owner wishes to sell the business or work with business partners.
• Information about cookies was buried somewhere in the privacy policy rather than being set out in a separate cookies policy document or all privacy policy related information is simply included somewhere in the terms and conditions, breaching the GDPR’s obligation to process personal data fairly and transparently.
• They did not provide website owners with adequate (if any) information or guidance to allow the customer to tailor the documentation to their websites effectively or explain the reason why certain provision should or should not be included, including in respect of their use of cookies and their data processing activities.
• They did not explain what actions the website owner needed to take in respect of your website itself e.g. in relation to whether or not you can place cookies on your users’ computers and when you need to obtain your users’ consent to process their data.

These are risks you simply cannot afford to take due to the massive financial penalties involved. Make the investment in yourself and your business today and make sure you get fully GDPR-compliant documentation for your website from GDPR Privacy Policy.