Skip to content1. Prepare a comprehensive and clear privacy policy
- Create a privacy policy page that clearly shows everything related to data collection and processing. Your policy should include information about:
- Types of data collected (such as names, email addresses, and browsing log).
- How to use data (marketing, analysis, or improving experience).
- External entities that may deal with data.
- How to secure user data.
- User rights such as the right to request access to or delete their data.
2. Clarify the use of link files (Cookies)
- Provide a window showing the use of link identification files on your site when first visitors enter. Prepare this window so that they can accept or reject non-essential link identification files.
- You can use link identification files to collect analytical data only after obtaining user approval, or by activating only basic link identification files that do not need approval.
3. Activate the HTTPS protocol
- Ensure that “Amaxil” relies on the HTTPS Protocol to protect data while moving between the site and the user. HTTPS refers to the encrypted safety layer and ensures the confidentiality of the data exchanged, which is an essential element in protecting user privacy.
4. Limited data collection
- Collect only the data necessary to operate your site or provide the service. Avoid collecting unnecessary information.
- For example, if there is a registration form, try to request only the required fields, such as name and email address, without requesting sensitive information.
5. Provide an option to update or delete data
- Make it easy for users to update or delete their personal data if they no longer want to handle the site.
- This can be done through their personal account page on the site or via a simple application form.
6. Protection from cyber attacks
- Make sure to update your site and any additions or software libraries that you use periodically to protect against gaps.
- Use strong firewalls and anti-malware software to protect the site from threats.
7. Determine the powers of access for your employees
- Restrict access to sensitive data within the “Amaxil” team. So that only the necessary employees can access the personal data of the users.
- Training employees on privacy policies and data protection measures enhances the level of safety.
8. Compliance with laws such as GDPR and CCPA
- You may need to comply with the requirements of global privacy laws such as GDPR (General Regulations for Data Protection) or CCPA (California Consumer Privacy Protection Act).
- These laws give users additional rights, such as the right to know the data stored on them or to request their deletion.
9. Provide update notifications
- If you make changes to the “Amaxil” privacy policy, provide clear notice to users about these changes.
- You can send an email to inform them or post a notice on the site to alert them.
10. Relying on privacy-respected analysis services
- When using analysis tools, such as Google Analytics, make sure to adjust the settings to respect the privacy of users, such as activating the IP ID settings.
- You can also use privacy-respecting alternatives such as Matomo or Plausible Analytics.
