Question

Which part of the privacy statement should include the information about a website storing customer's email addresses, past purchases and items clicked?

Answer 1

Put that information in the "Information we collect" (or "Types of personal information we collect") section of the privacy statement — and cross‑reference it in the related sections for use, sharing, tracking technologies, retention, and user rights.

Recommended structure and placement
- Information we collect / Types of personal information we collect
- List the specific categories you store, e.g.:
- Contact information: email address
- Transaction information: past purchases, order history
- Usage and browsing data: pages viewed, products or items clicked, search queries
- Technical/log data: IP address, device/browser information (if applicable)
- How we use your information
- Explain purposes (order processing, customer service, personalization/recommendations, marketing, fraud prevention, analytics).
- Cookies and tracking technologies
- Describe that items clicked and browsing behavior may be collected via cookies, pixels, analytics and how users can control them.
- Sharing / Disclosure
- Say whether you share these categories with service providers, analytics or advertising partners.
- Data retention
- State how long you keep email addresses, purchase history and behavioral data and the criteria for retention.
- Legal basis / Rights (if applicable under GDPR, CCPA, etc.)
- Under GDPR: state lawful basis (consent, contract performance, legitimate interests).
- Under CCPA/CPRA: map the data to statutory categories (identifiers, commercial information, internet activity, inferences) and describe opt-out/deletion rights.

Sample short wording you can drop into the "Information we collect" section
- "We collect contact and account information such as your email address; transaction information such as past purchases and order history; and usage data including pages viewed and items clicked. We collect this information directly when you create an account or make a purchase, and automatically through cookies and analytics tools when you use our site."

If you want, I can draft a complete short paragraph for each of the sections above tailored to your site and applicable law (GDPR/CCPA).