Blog: Legal Requirements

Page 3

Subscriptions, Auto-Renewals, and Payments Clauses

Subscriptions, auto-renewals, and payments clauses in a Terms and Conditions agreement or other user agreement all contain essential information that any business that takes payments online or provides any kind of service that will automatically charge a customer's account on a regular basis needs to share with its users. Whether your...

Data Retention Policy

A Data Retention Policy defines a business's established protocol for storing data and how it disposes of this data when it's no longer needed. There are many compelling reasons a business or organization could benefit from a Data Retention Policy such as to comply with national or international privacy laws, to...

Return and Refund Policy for Google Merchant Center

A Return and Refund Policy is an important legal document that outlines how customers can return products and/or receive a refund. There are specific Return and Refund Policy requirements that businesses with Google Merchant Center accounts need to meet in order to maintain their accounts. Failure to follow these requirements can...

What is Global Privacy Control?

Global Privacy Control (GPC) is a method that allows digital consumers to opt out of allowing companies to track their online behavior or sell or share their personal information. It takes the place of Do Not Track requests, which the California Attorney General has been unable to legally require businesses...

Disclaimers for Emails

An email disclaimer is the small print at the bottom of an email that communicates how recipients should use the material contained within the email. This article will go over what email disclaimers are used for, whether they are legally required, types of email disclaimers, and how you can draft your...

Transfer Impact Assessments (TIAs) versus Transfer Risk Assessment (TRAs)

(Editor's Note: In July of 2023, the EU-U.S. Data Privacy Framework was accepted as a replacement to the Privacy Shield framework noted as invalidated in this article.) On July 16, 2020, the European Court of Justice (CJEU) invalidated the EU-U.S. Privacy Shield in a case popularly known as the Schrems II...