Legal Things

1. Privacy Policies. In general, your website should post a privacy policy if you gather any personal data from your users. This serves as a disclosure that you’re collecting data (e.g., through web forms, Google Analytics data) and what data specifically you are collecting. While not required, you may explain how you use this information as consumers/users appreciate honesty and transparency, especially in the current climate. If your company has an international reach, you must comply with the European Union’s General Data Protection Regulation (GDPR). If you’re based in California, then you need to comply with the California Consumer Privacy Act.

2. eCommerce Considerations.
This is a wide topic and the following is meant to provide a brief overview. Any transaction online is governed by the same laws which govern an in-person transaction. Your online presence may also include public user boards and your user terms of service should be in place. You should also have a “takedown” policy for items that are deemed defamatory or in violation of copyright or trademark laws. If you’re selling on your website make sure you have encrypted personal information via HTTPS (to be honest pretty much all sites should now be HTTPS, but it is even more important for sites dealing with financial transactions).

3. Collection of Personal Information.
There are specific laws that govern the collection of personal information, such as name, email address, phone numbers, IP addresses, etc. Your website is collecting this information by using Web Analytics (like Google Analytics, Bing Analytics, or similar tool) or online advertising (via Google Ads, Bing Ads, DuckDuckGo ads, etc). At a minimum, you’re collecting personal information via newsletter sign-ups and web contact forms. As such, you need to determine what information is collected by your website, how that information is used, and what laws apply. For example, Google Analytics utilizes cookies — code that helps a site remember information about a returning visitor. These cookies can also be used for retargeting for online ads (Google Ads). The collection and use of this data must be disclosed for compliance. We recommend working with your Webmaster to fully understand your website’s ecosystem such as tracking software, functionality through plugins or third-party services.

4. Copyrighted Content.
Your own content should be protected from copyright infringement through the use of symbols and notices of conditions of any reproduction of content. You should also research safe harbor laws to make certain you’re protected from claims of copyright infringement. From an SEO point of view this is also important because if you are caught with content that is not unique on your website, you may be subject to a Google penalty.

5. Content Attribution.
It's important to include attribution for any work not created or purchased by your company. This applies to both written content as well photography and graphics.