Privacy policy text for emailing leads

[Jolanda]

We would like to set up a privacy policy or other text to refer to on our landing pages and in our emails to leads. In this policy we would like to indicate what we will do (and not do) with the personal data that person has entered and what kinds of email they can expect.

Are there any "best practice" rules for this. Or example texts or templates?

[shearn · Accepted solution]

Data protection and privacy are becoming a must-have for businesses in North America, Europe and beyond.  I've been involved with projects surrounding data protection in both Canada (CASL) and now in Europe (GDPR) and the best advice I can give would be to seek out advice from a data protection commissioner or someone with a background in data protection from a legal stand-point. 

Also, it's important to understand the difference between a privacy policy and a privacy statement. A privacy policy is business-wide and documents how you process data at every level. A privacy statement tells the public how you process data on your website.

Most advice you'll find online won't have much, if any, legal standing. 

Just as a reference to see how some countries are imposing data regulations for businesses :

• Canadian Anti-Spam Law FAQ
• General Data Protection Regulation 
  • GDPR Checklist
  • GDPR and You

[Jolanda]

Thank you very much for your reply Shearn! Especially the point that privacy policy and statement are not the same thing is very helpful. We will certainly dive into this.

[edjusten]

FYI @Jolanda and @shearn

HubSpot has released its GDPR product roadmap. Find out more here:
https://www.hubspot.com/data-privacy/gdpr/product-readiness

Ed Justen