How should I format my privacy policy on my store page?

[Lewsley]

Hi all,

I plan to insert a privacy policy page and other forms of T&Cs on my online store to make it more official. If I'm correctly thinking, Square is responsible for handling cookies, transactions, and other customer information gathering. However, in order for me to ship goods, I obviously need to have access to names and addresses. I want to be transparent about the process but I'm unsure how I should word my privacy policy.

Do I need the full privacy policy statement commonly found on sites such as Square? Or should I write a short paragraph explaining that my online store is subject to Square's Privacy Policy and T&Cs, and provide a link? I want to do my due diligence but both have their draw backs. The Standard 30 page privacy policy would provide me with more coverage but I'm not a law expert. I know there are free online generators and templates but as the saying goes, I'd rather not mess with things I don't understand; or contradict Square's Privacy Policies. Yet, the alternative feels as if I'm neglecting my responsibilities as a merchant to provide my customers with clarity as to how their information is being handled.

I'm just looking for a second opinion to weigh my options.

[Breffni · Accepted solution]

Hi @Lewsley I'd be happy to help here 🙂 

Yes - in terms of payments, Square provides end-to-end encryption and PCI DSS-compliant payment processing with no PCI or security fees. You can read more about PCI compliance here. 

In terms of Cookies - Square Online allows you to be compliant with consumer privacy data laws by enabling you to work with third-party cookie banner providers. You can learn more about how to add this to your site for free here. 

The ability to add a privacy policy to your Square Online website is designed to let your customers know about your own business's privacy policy and how you plan to use their information.

So you don't need to put Square's policies here, as they don't apply to how your business uses customer information.

You can feel free to place a link to Square's policies from your home page if you think it is necessary for your customers to read within the original context, though it's probably not necessary. 

I hope this helps!