Policies for website

Denbyas

I need a little advice when it comes to Shopify policies.
I am aware they have generators for privacy and T&Cs but is there any other areas I should be adding in to ensure I am fully compliant and covered.

it asks if I want to add a cookies policy but I know they create a tracking file for future visits but I’m not entirely sure what it does or if I need to do anything further.
I’m selling in UK only, and at present not collecting data except to process sales (however, in the future, may introduce a news letter but I’ll set this up closer to the time)
however, I will be looking into wholesale soon, but again, the information will be to process orders.

im a terrible worrier of Things that have not happened so I want to make sure I’m doing everything correctly

any advice would be lovely ☺️ 

aromaannie

Make sure you have a legal returns policy in place 

MattMattMattUK

Denbyas said:

I’m selling in UK only, and at present not collecting data except to process sales (however, in the future, may introduce a news letter but I’ll set this up closer to the time)

So there is collecting and processing of personal data, which means you need a data protection and handling policy. You also need to be registered with the Information Commissioner's Office. 
https://ico.org.uk/for-organisations/data-protection-fee/

Denbyas said:

it asks if I want to add a cookies policy but I know they create a tracking file for future visits but I’m not entirely sure what it does or if I need to do anything further.

Yes you will need a cookies policy because the Shopify site uses cookies, so make sure you add this. 

You also need to make sure your website states who you are in terms of the trading entity (sole trader, name, address, Ltd company name and address).

Denbyas

MattMattMattUK said:

Denbyas said:

I’m selling in UK only, and at present not collecting data except to process sales (however, in the future, may introduce a news letter but I’ll set this up closer to the time)

So there is collecting and processing of personal data, which means you need a data protection and handling policy. You also need to be registered with the Information Commissioner's Office. 
https://ico.org.uk/for-organisations/data-protection-fee/

Denbyas said:

it asks if I want to add a cookies policy but I know they create a tracking file for future visits but I’m not entirely sure what it does or if I need to do anything further.

Yes you will need a cookies policy because the Shopify site uses cookies, so make sure you add this. 

You also need to make sure your website states who you are in terms of the trading entity (sole trader, name, address, Ltd company name and address).

Thanks Matt,
the ICO confuses me.  I have used it in the past doing Virtual Assistant work which I understand registering, however, every time I complete the questionnaire when I am running a store, it always states I do not need to register.

it asks if you are only processing data for sales and orders which I will only be doing.  I am not intending to do any marketing yet and would look into revising this in the future.

Thanks so much for the other information everyone, I have set up my T&Cs, returns and Privacy policies and these include my contact details etc so hopefully this part is covered.  

I’ve sold on Etsy and marketplaces for years but it’s been at least a decade since I owned a website so I am always a little apprehensive with the new rules.

Sandtree

Remember that IPs are now considered personal data and so if you have anything like Google Analytics or Shopifies equivalent etc then you are processing personal data.

Cookie policies tend to be part of the Privacy Policy as they go hand in hand. 

If you are sensible then you should be speaking to a solicitor to get the policies reviewed and also your processes. Miss some requirements and suddenly people get a year to be able to reject your goods.

MattMattMattUK

Denbyas said:

MattMattMattUK said:

Denbyas said:

I’m selling in UK only, and at present not collecting data except to process sales (however, in the future, may introduce a news letter but I’ll set this up closer to the time)

So there is collecting and processing of personal data, which means you need a data protection and handling policy. You also need to be registered with the Information Commissioner's Office. 
https://ico.org.uk/for-organisations/data-protection-fee/

Denbyas said:

it asks if I want to add a cookies policy but I know they create a tracking file for future visits but I’m not entirely sure what it does or if I need to do anything further.

Yes you will need a cookies policy because the Shopify site uses cookies, so make sure you add this. 

You also need to make sure your website states who you are in terms of the trading entity (sole trader, name, address, Ltd company name and address).

Thanks Matt,
the ICO confuses me.  I have used it in the past doing Virtual Assistant work which I understand registering, however, every time I complete the questionnaire when I am running a store, it always states I do not need to register.

it asks if you are only processing data for sales and orders which I will only be doing.  I am not intending to do any marketing yet and would look into revising this in the future.

Thanks so much for the other information everyone, I have set up my T&Cs, returns and Privacy policies and these include my contact details etc so hopefully this part is covered.  

I’ve sold on Etsy and marketplaces for years but it’s been at least a decade since I owned a website so I am always a little apprehensive with the new rules.

When I set up my company originally I technically did not need an ICO registration (I do now), but did it anyway as customers (I only work B2B) seem to like it, it also covers you should you end up accidentally straying into something regarded as personal information (see the above on IP addresses and analytics). Considering the base fee is only £40 I would do it regardless, better to be safe than sorry and it is another layer of credibility that customers will like.