[Fuzzy]

Originally Posted by RayB

Well, you know me Fuzzy

^^^^^^^^^^^^^^

[Fuzzy]

Guys, do you have to have a security policy aswell ? What's your thoughts on it ?

[Indizine]

security on what? the PP covers the DPA.

[Fuzzy]

Originally Posted by Indizine

security on what? the PP covers the DPA.

Whats a DPA ?

Just most sites have a Security Policy and a Privacy Policy ?

[danmaull]

Data protection act i think

[Fuzzy]

Originally Posted by danmaull

Data protection act i think

Thanks Dan, do you have both ?

[Indizine]

I cant say I have ever noticed A security policy on any websites, but I think if you check what you have seen, it may mean security for client details - hence the DPA (Data Protection Act) if it is relevant to your business, that is.

Im registered with the ICO for one of my other consultancy businesses because I have to, but as the cert is for the overall Ltd Co. it covers any trading brands such as Indizine, in there anyway. But many sole traders dont need to register for DPA if the client data collected is for marketing purposes only. Other security examples would be if you are selling online, what security you provide for buyers (SSL cert for example) and a safe payment system.

[danmaull]

Most sites only have one but just looked on amazin and have found:
privacy notice http://www.amazon.co.uk/gp/help/cust...?nodeId=502584
and a security guarantee http://www.amazon.co.uk/gp/help/cust...?nodeId=502582
and also in the security section in the navigation bar on the left there is safe onkine transactions and something about email subscriptions. Have a read of all of that hope it helps

[Indizine]

terms and conditions, privacy policy and returns/warranties should between them, cover all the neceesary sub headings.

[RayB]

I'd roll it all into one Privacy Policy page that covers privacy and security - that's what most expect to see

You need a trems and conditions page really as well - both live best in the footer