Privacy and compliance.
Another one of those fun legal things we get to deal with on the internet.
So we're just gonna run through kind of a quick overview of this stuff because a
lot of the systems that you will use,
platforms and softwares already take this into account, uh,
when you're talking about collecting, uh,
customer information because of course they operate in the areas that require
this. So, um, in the EU they have gdpr,
which has been going on for several years now.
It is mandatory to comply with that. Um, if you are operating at all, uh,
with clients who reside there, it,
they put the ownership on you to protect any personally identifiable
information submitted to you, which is names, addresses, phone numbers,
et cetera. Um, including anything obviously health related, uh,
which would be like, you know, HIPAA stuff,
but typically you're not gonna deal too much with HIPAA stuff. Hopefully. Um,
just a, a quick quote from their site here. Um,
to give you an idea of how serious they are about GDPR compliance, uh,
for the less in severe infringements, uh,
it could get a fine of up to 10 million euro or 2% of the firm's worldwide
annual revenue from the proceeding financial year.
Definitely not something we want to deal with, although typically, you know,
they're not gonna come after you for 10 million euros if you're running a,
you know, 50 client personal training business. But, you know,
obviously if you guys are wanting to scale or depending on products and services
and you know how big you're building your business,
this may be an area to keep an eye on. Uh,
the necessary, uh, pain in the ass here, um, is just making,
is basically gonna be taken care of by your software stuff, right?
So payment processors, uh, you know, like PayPal,
Stripe Square, all of that kind of stuff,
they already have all this stuff in place. If you're using something like that,
that's covered e-commerce solutions, um, all of your typical, you know,
WooCommerce, Shopify,
all of those type of things and email management platforms, uh,
whether you're using active campaign, mail Chimp, you know, Salesforce,
whatever, those are also gonna cover that for you.
So if you have those in place and they're properly set up,
you have your terms and conditions, you should be good to go.
If however, you are collecting other information on your websites, for example,
in check-in forms, uh, and you're asking for health related information,
um,
definitely need to take care that we are using good practices to protect that
stuff. So probably having them, uh, you know,
type stuff in a forum is not the,
the way that we want to go about that for sure. Uh, use something with a,
like form submission, submit, uh,
secure email submission forms and things like that, that at least they're,
you know, encrypted or potentially protect that type of stuff. Or better yet,
um, don't have them submit that stuff directly on the website. Have them,
you know, either email it directly to you cause obviously
Email's gonna be a little bit better protected, get a business email better yet.
Um, and of course don't ask for any, you know,
health related or otherwise information that you don't absolutely need to have.
And of course covered in your terms and conditions,
what you do and don't do with that information so that it is perfectly clear.
So, super simple version, uh, use legitimate payment and CRM stuff,
that's pretty easy cuz those are the easiest ones to find and they work the
best. Never share client information without consent.
And I would say preferably written, so at least you have a hard copy for sure.
This includes progress photos, uh, health related stuff. You know, if you say,
oh, so-and-so, uh,
was we were working on this and their digestion improved from X, Y,
Z or they were dealing with this health condition, like,
don't share any of that stuff unless you have permission from the client.
And I would always get it written down, not just verbal.
So obviously if you're emailing them, we have that covered.
And then just quick recap,
terms and conditions to make sure we're very clear on how we collect,
what we do with it, how we protect it, um,
so that we are covered on that aspect. So short unit here,
important stuff.
The main point here is in regards to sharing client information for
testimonials and stuff, pictures, those type of things.
And we should be good to go.