Name/Title : OnlyThreesome.com
Email: Info@onlythreesome.com
INFORMATION YOUR ORGANIZATION COLLECTS:
The following table shows the information you selected when filling out the privacy tool.
TYPE OF INFORMATION WHAT YOU COLLECT WHO COLLECTS IT FOR WHAT REASON WHO USES IT STORED SHARED WITH
Contact informations
name
Website or IT support
Application forms
Website or IT support
Electronic file
CONSENT PRACTICES
Consent is voluntary agreement to what is done or proposed. Consent may be express or implied. Express consent is given explicitly, either verbally or in writing. Express consent is unambiguous and does not require any inference on the part of the organization requesting consent. Implied consent arises where consent can reasonably be inferred from an individual’s action or inaction.
EXPRESS CONSENT
You have indicated that your organization does not collect any sensitive or potentially sensitive information. If your organization decides to collect sensitive or potentially sensitive information in the future, you should always ensure that you obtain express consent from the customer. In other words, you must ask the customer directly if they consent to the collection of information and/or the transfer of information to another organization. For example, if you are collecting financial information for a credit check, ask the customer to sign a request form stating that you will release the information to the credit reporting agency and that the customer agrees. Express consent should be used whenever possible and in all cases where personal data is considered sensitive.
IMPLIED CONSENT
You have indicated that your organization does not collect any information to complete a sale or other transaction, verify a customer’s credit, place a special order for a customer, arrange a delivery, or process a return. If your organization chooses to collect this information in the future, please remember that if the information collected is necessary to perform one of the above actions, you can assume that the customer has consented when they provide this information to you. (This is called “implied consent”).
Remember:
You cannot refuse to complete a transaction if the customer refuses to consent to the collection of information that is not necessary to complete the transaction.
If you later decide to use this information for another purpose, you must go back and obtain the customer’s consent.
OPT-OUT CONSENT
You collect the following information for secondary purposes, such as marketing, administering a customer loyalty program, or customer relationship management:
In these circumstances, you have to give the customer an opportunity to tell you they don’t want you to use their information for that purpose. This is called an “opt-out”.
Opt-outs must be clear, easy to understand and easy for the customer to do. You can have an opt-out box on a paper-based or web application form, for example, that tells customers that if they don’t want to receive promotional material in the mail, just check here. You may want to let the customer know what they’ll be missing – special deals and new product information, for example – but don’t minimize, hide or obscure the opt-out. And don’t make it complicated, like requiring the customer to call a special phone number between certain hours. The point is to let the customer decide.
SECURITY PLAN
EMPLOYEE ACCESS TO CUSTOMER INFORMATION
You indicated that there are no employees in your organization who see or process information unnecessarily. This is a good practice. By limiting the number of people who view or process information you reduce the risk of inappropriate use or disclosure.
STORAGE OF PERSONAL INFORMATION: PAPER FILES
You indicated your organization does not keep any information in paper files.
In the future, if you do plan to store personal information in paper files, it is extremely important to take all measures possible in order to safely store your customer’s personal information. You should protect those files by moving them to:
A locked cabinet
A restricted area
An area with an alarm system
STORAGE OF PERSONAL INFORMATION: ELECTRONIC FILES
The following includes the types of information you may store in electronic files:
On me
It is extremely important to take all measures possible in order to safely store your customer’s personal information. Try the following methods to protect those files by using:
Computer passwords
Firewalls
Encrypted data files
Encrypted personal information that is sent or received over the Internet (by email or through web forms, for eg.)
Electronic audit trails that identify who has access information
Keeping backup files in a locked cabinet
Be especially careful with laptops, USB keys and electronic wireless devices. These types of devices can potentially store a large amount of your customer’s personal information. All of these devices should be password protected and have the strongest form of protection possible.
COLLECTION OF SENSITIVE INFORMATION
You indicate