Privacy Policy Challenge Day 1

It’s finally time – the Privacy Policy 5-Day challenge starts TODAY!
 
Each day I'll send an email to all registered challengers first thing in the morning, 8.00 a.m. CET (Zurich) time and then at 12.00 p.m. we'll have our live training via Zoom call – click on the link to register.
 
Make sure to join our Facebook Group or LinkedIn Group to get access to live training recordings.
 
I'll also link each email to a Facebook Post or LinkedIn post so you can comment, post your victories, struggles, and ask for support - it's gonna be a blast!
 
Now, I totally don’t want you to keep this training a secret - so feel free to pass it along and share at ANYTIME (including sharing our daily trainings, which I REALLY appreciate).
 
How to share? – forward an email to a friend, share this post or a link to our Challenge Registration Page
 
 
So let’s just dive into Day 1
Before we dive right into today’s email - I want to give you a quick outline of what this challenge will have you doing.
 
Each Privacy Policy must answer the following 4 basic questions:
 

1. Information the company collects from the customers
2. Information the company collects about customers from other sources such device information, credit checks or sanctions lists
3. How the company will use information and with whom customer information will be shared
4. Customer rights with respect to their access to information, their right to change their preferences, opt-out and other rights they have

 
There is also a number of small housekeeping segments, such as introduction, where the company is introduced, and some concluding remarks, addressing the issues of how the policy can be updated and how the customer can get in touch with the company if they have questions.
 
THIS IS IT – I’m serious.
 
Each day you’ll will be creating one section of the Privacy Policy for your company (or any imaginary company). It should not take you longer than just 10-15 minutes a day.
 
So today we’re going to have you create a section about “what information we collect from our customers”.
 
It's SUPER SIMPLE.
 
All you need to do is to:

1. Use the template text below and use/delete/add data that is relevant for your business.
2. Attend the video training today at 12.00 pm CET and ask your questions (or watch the recording).
3. Check-in with your accountability buddy and/or post your result into the Facebook or LinkedIn group and compare your text with others.

I know it’s hard to believe, but this is essentially IT!!!!! (I told you – it’s not hard).
 
Yes, some companies include additional optional sections in their privacy policies and I will give you some examples, as bonus content during this week. You don’t need to worry about it right now. If you have time – I will teach you how and when you can use these bonus sections, but remember – most of them are just 1-2 sentences and most of them are optional anyway.
 
Let’s get to our Monday assignment.
 
Today we will write the segment of the Privacy Policy that answers the question: What information my company collects from the customer
------------------------------------- 
Here is the template to use:
 
Information we collect from you
 
In order to “open an account with us” (or “register for our services”) you need to provide the following information (thereafter you will list all the personal information you collect from the customer during the onboarding process, when they register, and information you collect at specific events):

• Registration details. Example: your full name, e-mail, address, selfie, ID document, information about your company and the individuals owning and managing the company. (Check your AML Policy or Customer Onboarding Policy, all the required data would normally be listed there).
• List the details you collect when the customer places an order or makes a transaction.
• Example: In order to initiate transactions with us, send and receive funds, you need to provide us the details of each transaction, names and details of the counterparties involved, the amount and the currencies, shipping address, payment method, and any other relevant transactional information. You may also create a list of trusted beneficiaries so that it may be easier for you transact with your friends and trusted contacts: if this is the case, we will collect their personal data from you.  
• Example for e-commerce or online shopping: You may provide information about yourself to us when you define your search criteria, search or buy products or services, view or download content on our website, update your address book or shipping address, or provide feedback when returning the items, add items to your wishlist or deploy product availability or sales alerts.  (You do not need to be 100% specific here, however, this section could be helpful, if the customers give you information about their gender, age, size, weight, language preferences and some other personal information).
• List all details you may collect from the customer in specific instances (e.g. when they complain, need to re-set their password…).
• Example: You may provide personal information to us when you communicate with us by phone, e-mail or support messenger, complete a questionnaire, open a support ticket, enter a contest, participate in community features, answer questionnaires, provide and rate customer reviews or otherwise communicate with us about our services. (You could check with your marketing and CS team what is applicable to your entity, if you are not 100% sure).
• Add the following disclaimer: Some of this information, for example, indicating your racial origin or biometrical details, is considered especially sensitive, from the point of view of data protection, and we will use this information in strict accordance with the law.

----------------------------------- 
 
FAQ: does it make a difference if the Privacy Policy is written from a 3^rd person (…the company XYZ collects customer personal information…) or 1^st person (…we collect your personal information…)?
 
Answer: not at all, just be consistent. All examples in the challenge are written from a 1^st person point of view, just because I find it friendlier and more personal.

----------------------------------- 
 
Now you might be curious how this is going to grow into you being able to create a super comprehensive Privacy Policy and make sure you did not miss anything and feel confident about it?
 
Tune into today's training at 12 p.m. CET (or catch the replay) where we're going to cover the structure of the perfect Privacy Policy and how it relates to data protection regulation.
 
>>Click Here to Visit Today’s Post on Facebook<<
>>Click Here to Visit Today’s Post on LinkedIn<<
 
That’s it, Day 1 is in the books and by the end of today you will have completed 20% of your Privacy Policy!
 
Make sure to tune into our live training today for additional bonus content about how to use today's content in order to upgrade your CV or LinkedIn.
 
See you soon!