Skip to content

Instantly share code, notes, and snippets.

@greggoldring
Created February 5, 2013 20:43
Show Gist options
  • Save greggoldring/4717483 to your computer and use it in GitHub Desktop.
Save greggoldring/4717483 to your computer and use it in GitHub Desktop.
I don't recommend slapping this up without consulting a lawyer. I'm happy to refer you to ours (She rocks!). Hopefully this helps as a good starting point for your own journey into privacy policies. Things to find and replace: [company legal name] [company name] [company domain] [company address] [privacy officer name] And don't forget to set up…
<p><strong>[company name] Privacy Policy</strong></p>
<p>The following policy sets forth how [company legal name], ("[company name]") collects, uses and discloses the information about [company name] customers and the customer’s authorized representatives (collectively, "You") that [company name] collects on this website ("Customer Information" or "Your Information"). This Privacy Policy applies to [company domain] and any web sites related to operation of the [company name] Services ("[company name] Services").</p>
<p><strong>Accountability</strong> - Contacting [company name]. <br>
If You have any questions about this Privacy Policy or our information collection, use and disclosure practices You can contact [company name]’s Privacy Officer, [privacy officer name], at privacy@[company domain].</p>
<p><strong>Identifying Purposes</strong> - Information Collected. <br>
During the signup process, [company name] collects identifiable information, including, but not limited to, name, company name, work address, e-mail address, phone number, credit card information, the names of any customer’s principal authorized representatives who will work with [company name], and any other information [company name] reasonably requires in order to provide access to [company name]’s software applications and services to You. When You use the [company name] Services, [company name] will request that You select user name(s) and password(s) and that You may establish personal identification numbers (PINs), all of which are used to identify You when You are using the [company name] Services.</p>
<p>You may opt not to register as an [company name] Customer but to provide your name and e-mail address to [company name] in order to receive e-mails from or notices under [company name]’s e-mail newsletter subscriptions, or access to [company name]’s support forum. In the event you opt to receive such e-mails, notices or access from [company name], the terms of this Privacy Policy will apply to you and the information collected by [company name] to provide such e-mails, notices or access will be treated as if it were Customer Information under this Privacy Policy.</p>
<p><strong>Consent</strong>. <br>
By providing the information collected for registration as an [company name] customer, You consent to the collection of such information. [company name] may retain copies of any communications [company name] sends to or receives from You and other visitors to our site for our records, but may not use any such information except in accordance with the terms of [company name]’s Privacy Policy </p>
<p><strong>Limited Collection</strong>. <br>
[company name] does not collect any other information other than the information [company name] reasonably requires in order to provide access to [company name]’s software applications and services to You and all of its customers. [company name] does not collect names, postal or e-mail addresses, and phone numbers of non-customer visitors to [company name]'s Web site, except to complete pending registration applications, to provide access to product demonstrations, or to respond to inquiries regarding the [company name] Services.</p>
<p><strong>Limiting Use, Disclosure, and Retention</strong> - Use of Collected Information. <br>
[company name] utilizes the information submitted by prospective customers to authenticate and verify the identity of such prospective customers who may be communicating with [company name]. [company name] will use the information it collects during the registration process, and other information it collects while authenticating the identity of prospective customers to evaluate the customer's application for use of the [company name] Services.</p>
<p>[company name] uses information it collects from You in connection the completion of all transactions on behalf of You. [company name] may use such information to operate, maintain and enhance the [company name] Services and other services offered by [company name]. [company name] also uses Customer Information to bill You, as applicable, for their use of [company name]’s services and to monitor compliance with the rules and policies of the [company name] Services.</p>
<p>[company name] compiles and analyzes Your Information along with other Customers’ Information into aggregated research reports. Except as may be otherwise agreed in a separate agreement between [company name] and You, [company name] may share this aggregated data with its business partners. However, except as set forth below, aggregated information is not identified with You or any particular customer, Your Information or any customer specific information, or Your representative or any particular customer's representative.</p>
<p>[company name] will retain Customer Information only for so long as necessary to permit use as outlined in this policy including for [company name] to provide access to [company name]’s software applications and services to You and its other customers.</p>
<p><strong>Accuracy</strong> - Customer update or deletion of information collected by [company name]. <br>
You have a responsibility to keep certain information current particularly with respect to authorized representatives. You may correct, change, update or delete Your Information and any information about Your authorized representatives through the use of Your login, password and PIN at [company domain], as applicable.</p>
<p><strong>Safeguards</strong></p>
<p>Information Sharing. <br>
[company name] and its authorized representatives have access to Your Information. [company name] will not disclose, sell, rent, license, exchange or release Your Information to third parties except in accord with this policy, when [company name] has permission from You or when [company name] believes in good faith that the law requires it or under the circumstances described below. [company name] will disclose portions of Your Information such as credit card numbers to the relevant banks that process payments. Your Information will contain certain information that [company name] maintains for You while such You use the [company name] Services.</p>
<p>[company name] may disclose Your Information when [company name] has reason to believe that disclosing Your Information is necessary to identify, contact or bring legal action against someone who may be violating the terms of use for the [company name] Services or may be causing injury to or interference (either intentionally or unintentionally) with [company name] rights or property, other [company name] customers, or anyone else who could be harmed by such activities.</p>
<p>[company name] may share aggregated customer Information with any third parties. From time to time, [company name] may retain the services of third-party service providers and consultants. [company name] may allow these third parties to access Your Information, but only to the extent required to perform the tasks [company name] has retained them to perform that may include certain operations for the [company name] Services. [company name]'s shall require such third parties to agree to maintain the confidentiality of Your Information in compliance with the terms of this Privacy Policy.</p>
<p><strong>Cookies</strong>. <br>
[company name]’s Web site(s) may use cookies to recognize each customer as an authorized user of the [company name] Services, and allow [company name] to provide customized services and improve the performance and usability of any [company name] website(s). [company name] may offer certain features that are only available through the use of a "cookie". You are always free to decline our cookies if Your browser permits, although in that case You may not be able to use certain features on [company name]’s website(s).</p>
<p><strong>Security Precautions</strong>. <br>
[company name] takes protective measures related to information security within the [company name] Services to ensure the confidentiality of Your sensitive Customer Information while stored or in use within the [company name] Services and implements industry-standard security measures designed to prevent the loss, misuse, unauthorized access, disclosure, destruction or alteration of the personal information we collect.</p>
<p>This Privacy Policy covers exchanges of information within the [company name] web sites. The [company name] sites may contain links to other sites but [company name] is not responsible for the privacy practices or the content of such sites.</p>
<p><strong>Openness</strong> - Your choices regarding collection, use and distribution of Your Information. <br>
By accepting the terms of the terms of use for the [company name] Services and becoming a customer, You agree that [company name] may collect certain information (as detailed in this Privacy Policy) from and about You to authenticate You and enroll You as a user of the [company name] Services. If a prospective customer does not agree to this Privacy Policy, such prospective customer may not become an [company name] customer.</p>
<p>[company name] may offer to You, during registration or, through a follow-on email, the opportunity to receive offers and information about products and services from [company name]. You will be provided a choice whether to accept or not accept this offer. If You accept, [company name] (or agents working on behalf of [company name]) may occasionally send You such information. If this offer is not accepted, then You will not receive such information. If You initially accept, You will be provided opportunity to discontinue receiving such information each time it is sent.</p>
<p><strong>Customer Contact</strong>. <br>
[company name] reserves the right to contact You regarding account status and changes to the terms of use for the [company name] Services, this Privacy Policy, or any other policies or agreements relevant to You.</p>
<p>Your access to information collected by [company name]. <br>
Upon written request, [company name] will provide to You a summary of any of Your Information retained by [company name] regarding You including any use and disclosure.</p>
<p><strong>Challenging Compliance</strong> - Privacy Officer Contact. <br>
For anything to do with this Privacy Policy, including questions or comments, or to challenge [company name] compliance with this Privacy Policy, please contact [company name] as follows:</p>
<p>[privacy officer name], Privacy Officer <br>
[company legal name] <br>
[company address]<br>
email: privacy@[company domain].</p>
<p>[company name] will inform individuals who make enquiries or lodge complaints about [company name]’s enquiry or complaint procedures, as applicable. If a complaint is found to be justified, [company name] will take appropriate measures, including, if necessary, amending [company name]’s policies and practices.</p>
<p><strong>Changes to the Privacy Policy</strong>. <br>
Of course, this Privacy Policy is subject to applicable privacy laws and [company name] 's right to change it at any time. [company name] may change this Privacy Policy at any time and will post the changes to the Privacy Policy on our Web sites. It is your responsibility to check this Agreement periodically for changes. Your continued use of the [company name] Services following the posting of any changes to this Policy constitutes acceptance of those changes which shall also bind Your authorized representatives. [company name] may also, in the future, offer new services, products and/or features (including, the release of new tools and resources). Such new features and/or services shall also be subject to this Privacy Policy. If You do not agree to any such change, You must terminate Your agreement with [company name] and cease using the [company name] Services.</p>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment