Whenever your company implements a significant change in how it handles customers' personal data, it's crucial to update your privacy policy to reflect those changes. Similarly, customers need to be transparently informed. This also applies to your cookie policy, if your platform uses this technique.
A privacy policy isn't something you set up just once. Unfortunately, many make this mistake, and ultimately, the customer suffers the consequences. Your company shouldn't make this error. A privacy policy is a crucial document that symbolizes your commitment to protecting personal data and privacy. Even if few people access this section, it's mandatory on any website because it establishes relevant legal information for users, as well as the use of your service, content, and expected conduct.
What should be included in the privacy policies?
The privacy policy includes information about the processing, collection, storage, and security measures that ensure the integrity of customer data. The information may vary depending on the user's location.
Furthermore, the privacy policy may address alternative measures adopted by the company. For example, it may specify the precautions taken when handling the personal data of minors. In short, it is a compilation of information about privacy to guide everyone on the company's transparency and their rights guaranteed by law.
How should your privacy policy address changes in data protection?
Data protection laws, such as the General Data Protection Law (LGPD), should be seen as auxiliary guidelines in the processing of personal information and an incentive for a culture of privacy. Laws such as the European Union's GDPR require website administrators to maintain an up-to-date privacy policy and to seek user consent.
Therefore, be aware that your privacy policy must comply with the LGPD (Brazilian General Data Protection Law). Ensure that all your security measures and processes are aligned with the legislation, as well as the availability of channels that enable the actions foreseen in the LGPD.
How can I communicate the changes to my users and customers?
There are several ways to inform users about changes, including a pop-up notification to obtain consent for the changes, an email, or the inclusion of an updates clause in the privacy policy.
Remember: the fact that they previously agreed doesn't guarantee they will agree again. Therefore, if you plan to make changes that affect the user experience or the site's structure, it's crucial that they are informed so they can give their consent (or refuse it) after understanding the changes.
Always keep in mind that the means of interaction must be visible and that users must consent.
For example, if the site modifier adds a social media widget to the site that allows third parties to collect information, it's important to update the privacy policy to disclose the change and state that your site now allows third parties to collect data.
Learn more about us Privacy ToolsWe are a PrivacyTech company and we help your company comply with the LGPD (Brazilian General Data Protection Law) through intuitive resources.
