General Data Protection Regulation or GDPR for short. Urrrrgh, could it not sound any more un-sexy?! I’ve spent months just trying to ignore it, pretending it’s not really happening and hoping it’ll go away. But it’s not going anywhere and it’s looming fast, and the last thing anyone wants is a big, fat fine for not being compliant.
But actually, now I’ve got my head round it, it’s not as grim as it sounds and it’s pretty easy to get everything in place.
GDPR is a regulation in EU law on data protection and privacy for all individuals and as from the 25th May 2018 it will be compulsory for all businesses to be GDPR compliant.
So what does this mean for your small business? Well, from a website point of view, it means that if you are collecting any information of any kind from anyone visiting your website, you have to make sure you have their permission to do so.
It’s all about transparency and keeping people informed. If you collect any form of personal data i.e email addresses, first and last names, shipping addresses etc, you will need to make sure that people are aware of this and you need to explain to them exactly how and why you are storing this information and how that data will be used. Make it clear and concise and give them the option to either opt in or out.
Your website also collects cookies, small files of information used to create a better experience for your visiting guest, and you need to make sure your user knows this and is able to either give permission or deny the use of saving cookies on their computer or device.
To be compliant you will need to have a cookie and privacy policy in place, so your website visitor will have all this information to hand to explain exactly what you are going to do with their personal data.
Although it is not legally required, it is also a good idea to have website terms of use policy in place. These terms and conditions will be unique to your type of business and will limit your liability should a customer take you to court, as well as protecting your rights to the content of your website.
Every website I build now includes all the GDPR must haves, including the cookie consent banner, the privacy and cookie policy and your website terms and conditions pages. Once you’re all set up that’s it, you won’t need to worry about it. You’re legal!
Make sure your website is GDPR ready by the 25th May. I offer a great value compliancy package, so get in touch.
0 Comments