Not surprisingly, Amazon requires that you have a privacy policy on your website. Privacy policies don’t have to be long and complex to be valid. You just need to spell out the answers to the following questions:

  • who is collecting this information? (you + what other third-party partners)
  • what kind of information are you collecting on them and how? (e.g. credit card numbers, email addresses, names, mailing addresses, IP addresses, demographic data)
  • when do you share it?
  • where do you use this information?
  • how do you protect sensitive identifiable information? (especially credit card numbers!)
  • how can I find out what you know about me?
  • why do you collect it?