Website Legal Package – 5 Essential Documents for Your Website

We at The Legal Stop are constantly coming up with innovative solutions to help you save money and keep your business legal.

The Website Legal Package offers a clever way for online businesses to comply with the many legal requirements faced when selling online. If you are selling goods and/or services online there are several laws and regulations that you must comply with; for example, the Data Protection Act 1998 requires all organisations that, directly or indirectly, collect information about people to have a privacy policy in place ensuring that organisations collect information about people fairly and transparently.

With The Website Legal Package all the required legal documents for your online business are drafted by a UK lawyer specifically for you. At an affordable one- off fixed fee of only £350 (NO HIDDEN EXTRAS) one of our lawyers will draft all the documents you require for your online business. Every document is bespoke, drafted specifically for your website to meet your particular needs.

The package includes 5 ESSENTIAL DOCUMENTS for your online business:

  1. Terms and Conditions
  2. Privacy Policy
  3. Cookies Policy
  4. Acceptable Use Policy, and
  5. Website Terms of Use

If you want to know more get in touch with us at info@thelegalstop.co.uk

 

Google should Change its Privacy Policy

As the European Union keeps on warning Google about its privacy policy till the summer it will probably face some serious sanctions.

After in March this year the search engine giant combined 60 privacy policies of their different services into one, the EU pushes it to change their privacy policy.

Some of the changes will include the right of Google to track individual users across different Google services. Google is known to operate also with some other services like Gmail, YouTube, Google+, and Android mobile systems.

Using these different services Google may now make their targeted advertising more effective.

This new privacy policy does not obey EU privacy regulations because through it Google collects too much personal information which in some of the cases users prefer not to share.

The warning of the EU towards Google was not to use the personal data collected simply for advertising purposes and to “reinforce users’ consent”.

Yesterday the French privacy regulator CNIL announced that Google did not manage to do some changes and give proper answers in the period of four months it was given.

“In this context, the EU data protection authorities are committed to act and continue their investigations,” CNIL added. “Therefore, they propose to set up a working group, led by the CNIL, in order to coordinate their reaction, which should take place before summer.”

Google, on the other hand, claims they had taken steps to comply with European law and that they will continue doing so.

According to Joaquin Almunia, the EU’s head of competition, Google used the fact it is a main search engine in order to unfairly promote their own products.

Another thing Google was also blamed for was that it paid for paying only £6 million in UK tax last year, despite generating $4.1 billion of revenue.

Google is a big company, but we know that most of you do own a company website. For this website, however, you also need a privacy policy! The Legal Stop has taken care of this, as we provide a Free Website Privacy Policy Template.

New Cookie Law

On 26th May 2011 the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 (UK Regulations) came into force in the UK. The UK Regulations relate to the use of cookies.

The new cookie law aims to protect personal data, privacy and other rights of website users.

Cookies are text files on web browsers, information that can be used for authentication, identification of a user session, for user’s preferences shopping habits and for tracking browsing activities.

Under the new law if your website uses cookies then you are required to:

  • inform users about cookies and what you are going to use their information for; and
  • obtain users’ consent to the placing of the cookies.

In other words, a website owner must not store information or gain access to information stored in the computer of a user unless the user “is provided with clear and comprehensive information about the purposes of the storage of, or access to, that information” and “has given his or her consent”.

The type of consent needed to satisfy the requirements of the UK Regulations is unclear; also there are conflicting opinions on how the consent requirement will operate in practice. The Information Commissioner’s Office (ICO) published guidance that offers advice on when and how the consent may be given. The guidance states:

“You need to provide information about cookies and obtain consent before a cookie is set for the first time.  Provided you get consent at that point you do not need to do so again for the same person each time you use the same cookie (for the same purpose) in future”.

“At present, most browser settings are not sophisticated enough to allow you to assume that the user has given consent to allow your website to set a cookie. Also, not everyone who visits your site will do so using a browser.  They may, for example, have used an application on their mobile device.  So, for now we are advising organisations which use cookies or other means of storing information on a user’s equipment that they have to gain consent some other way”.

A way to provide website users with information, thus complying with the requirement of the UK Regulations, is to provide them with a cookies policy or a privacy policy stating the types of cookies used, the type of information collected and what the information will be used for.

If your website uses cookies then the first step would be for you to have an up to date cookies or privacy policy. The Legal Stop has provided a fully comprehensive Website Cookies Policy Template which can be freely downloaded by clicking on the following link:

http://www.thelegalstop.co.uk/free_legaldocuments.html

The consent requirement is more difficult to satisfy. The ICO guidance suggests a number of ways to obtain consent. Consent could be obtained via:

  • use of pop ups asking for consent;
  • terms and conditions of use which users agree to upon registering on a website;
  • a text in a header or footer of webpage;
  • inclusion in preferences that users set when using a website; and
  • a hybrid of the above methods.

Generally, website owners should consider what would work for them by looking at their business and how they use their website. Thus, much depends upon how your website uses cookies.  The more privacy intrusive your activity, the more you will need to do to get the required consent.

Under the new law, the only exemption to the consent requirement is where the cookie is strictly necessary for a service requested by the user. If a cookie forms an integral part of a website’s functionality for example a shopping basket or the storage of a user’s personal preferences, then there is no need to obtain user’s consent.

The new cookie law carries a maximum fine of £500,000 for serious breaches. The ICO confirmed that until May 2012 it will not take any enforcement action against companies or website owners that are trying to find solutions to the problem of obtaining consent. From May 2012, the ICO will decide on case by case basis whether enforcement action is appropriate.

WHAT WEBSITE OWNERS SHOULD DO TO COMPLY WITH THE NEW COOKIE LAW?                                                                

Owners of websites that use cookies are required to take three steps: 

  1. Check what type of cookies and similar technologies you use and how you use them.
  2. Assess how intrusive your use of cookies is.
  3. Decide what solution to obtain consent will be best in your circumstances.