Your business website is a powerful tool for engaging potential and existing customers, and for collecting useful data. Where information collected is personal information, however, you have obligations under the Privacy Act 1993. The legislation contains 12 Privacy Principles which regulate how you collect, use, disclose and store personal information.

If you are collecting, or intend to collect, personal information through a website, the website privacy policy or notice should record how you will comply with the Privacy Principles. It should inform site visitors why their information is being collected, how it will be stored, who it will be disclosed to and how they can access it or request that it be destroyed.

The Privacy Commissioner's website has a free online tool called 'Priv-o-matic' which can generate a simple privacy statement; find it here. Otherwise, if you are unsure whether your current or proposed website privacy notice or policy is adequate, do talk with us.