Privacy & data

Only use data that has a clear purpose.

Search analytics can provide a lot of insight, but that does not mean that every possible data point needs to be collected.

Data minimization

Process only data that is required for search, analytics, diagnosis or agreed functionality.

Explain why data is collected and prevent reuse for unrelated purposes.

Tailor retention periods to operational and analytical necessity instead of storing data indefinitely.

Where possible, use technical or pseudonymous identifiers instead of direct identifying data.

Make data flows and responsibilities understandable to customers and administrators.

Privacy choices should be part of implementation and governance, not just legal documentation.