PREPARING ON-LINE PERSONAL INFORMATION COLLECTION (PIC) STATEMENTS AND PRIVACY POLICY STATEMENTS (PPS)

STATEMENT OF RIGHTS OF ACCESS AND CORRECTION: This should inform the individual that he or she has the right to request access to and correction of personally identifiable information about him or her that is held by you. For example:

"You have the right to request access to and correction of information about you held by us."

NOTICE OF CONTACT PERSON TO REQUEST ACCESS OR CORRECTION: This should inform the individual of the name and contact details of the person to contact to request access to or correction. In an on-line situation this could be in the form of an e-mail address hotlinked to a pop-up message box. For example:

"If you wish to access or correct your personal data held by us, please e-mail winifred_chan@bonfire.com." Clicking the hotlink would activate the pop-up message box.

SECURITY MEASURES: As good practice, we recommend that you also include a notice with your on-line forms on the specific security measures that are applied to on-line transmission of the form concerned. This is particularly recommended if the form is used to collect information that individuals may have security concerns about such as credit card details.

LINK TO PRIVACY POLICY STATEMENT: Also as a good practice, we recommend that you provide a hotlink between your on-line forms for collecting personally identifiable information and your general Privacy Policy Statement.