When you are answering the Privacy Policy questionnaire, you will be asked to select the legal bases under which you process the personal information that you collect. This particular question and disclosure are required by the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. These privacy laws generally prohibit the collection, use, and sharing of personal information unless an exception, also called a "legal basis" applies.
Business websites commonly use the following legal bases to process personal information:
- The user has provided consent to the processing of their information: this legal basis applies when the consumer has agreed to give you their personal information. For example, this legal basis is used when a consumer submits their personal information on a contact form and agrees to your Privacy Policy when doing so; and
- Processing is necessary to perform a contract with the user: this legal basis applies when you need to use the consumer's personal information to fulfill an agreement with a consumer. For example, if the consumer purchased shoes from your website, you will need to process that consumer's shipping address to send them the shoes as agreed.
You can make your selections for the legal bases that you use by checking the box next to the appropriate legal basis from the list provided. If the legal basis that you need is not provided on the list, you can always select "other" and fill in the box with a description of that legal basis. We have also labeled the most popular legal bases that our customers' websites use with the label "popular".