Starting your own business is scary and challenging, especially when it comes to legal staff. Let’s chat about data, clients, and ways to mitigate privacy risks from point one.
So you’ve built your website, found perfect colors for your brand book, and found first clients. Good job!
1. Data mapping
Define what kind of data you collect (emails for newsletters, names, and mobile phones of your prospects, social media profiles, ads data from cookies). Creating the simple list of types of records you have in place will help you navigate a lot of matters moving forward (so keep it handy).
2. Data Minimization
Consider collecting only data that is essential for your business. You probably can have only a zip code instead of a full physical address to know where your clients are coming from, right?
Make sure that your customers have the opportunity to unsubscribe, request access to the information your business holds about the user, or request a deletion of all the information you have about them. Be careful to comply with a legitimate request from the data subjects in a timely manner once you have them.
Make sure to list what kind of cookies your website is using, the data collected and purposes of this data usage (targeted ads, website performance, analytics).
You probably use analytics tools to measure your website traffic, payment processing systems to get paid by clients and marketing platforms to manage your email and social media campaigns. Simply list the vendors and functions covered by them in the separate section.
And remember, the safe ground is a key to your success, so consider speaking to your lawyer or privacy consultant first.