Prohibited Content & Practices: Data Collection & Usage

Websites should not collect, or use, data for ambiguous purposes. Similarly, websites should ensure that necessary security provisions are in place if collecting data. 

Insufficient Data Security

Websites should contain sufficient data security measures for data collection purposes. Websites which are lacking appropriate data security measures for data collection purposes are not eligible to run. This relates specifically to the collection of personal data via an unsecured page which is not SSL protected or certified, including: 

❌ Financial Details, e.g., credit card number.

❌ National Identity numbers.

❌ Healthcare information.

❌ Drivers License.

❌ Social Security Numbers.

❌ Passport Numbers.

❌ Tax Information.

❌ Pension Information.

How to Fix: Insufficient Data Security 

1. Review the ad to make sure that it is not collecting personal data via an unsecured page or non SSL protected page. 
2. Edit the ad to make sure that the ad links to a website which collects personal data via a secured or SSL protected page. 
   1. Create a new ad if you need to upload a new image.
   2. Add the updated ad destination landing page.
   3. Any edits made to an edit will resubmit the ad and its edits for policy review.
3. Review the website to make sure personal information is collected via a secure SSL page, or personal information is not collected from the user if it cannot be obtained via a secure SSL page.
   1. Any collection of personal data should be via a secure page or SSL compliant page. With SSL, the webpage URL will appear with https:// instead of http://
4. Update the website to make sure that personal information is collected via a secure SSL page or no personal data is collected.
   1. Add or remove the specified information to the landing page destination.
   2. Update the landing page destination on the ad, if you cannot fix the current ad landing page destination directly.
5. Policy Team will review the updates to ensure the relevant changes have been made
   1. Generally, ads will be reviewed by the Policy team within 24-48 hours. In certain cases, ads may take longer to be reviewed if a more comprehensive review is required.

Personal Information Misuse

Websites or advertisers should not use personal information of a customer in any unauthorized manner. This includes:

❌ Imagery of users in ads without proper consent

❌ Users’ contact information or details being re-sold without consent 

❌ Use of ads targeting an individual based off of personal information, e.g., name or job title 

❌ Any ads which targets an individual based off of sensitive personal information, e.g., financial or health status 

❌ Collection of data for ambiguous or unclear purposes

How to Fix: Personal Information Misuse  

1. Review the ad to make sure that it is not using personal data of a customer without their consent or targeting an individual based off of personal information. 
2. Edit the ad to make sure that the ad links to a website that is not collecting personal information in an unauthorized manner, or targeting an individual based off of sensitive information.
   1. Create a new ad if you need to upload a new image
   2. Add the updated ad destination landing page 
   3. Any edits made to an edit will resubmit the ad and it’s edits for policy review
3. Review the website to make sure personal information is collected via a secure SSL page, and any personal data is not being used in an unauthorized manner. 
   1. Any collection of personal data should be via a secure page or SSL compliant page. With SSL, the webpage URL will appear with https:// instead of http://.
4. Update the website to make sure that personal information is collected via a secure SSL page, and that personal data of a customer is not being used without their consent. 
   1. Add or remove the specified information to the landing page destination
   2. Update the landing page destination on the ad, if you cannot fix the current ad landing page destination directly 
5. Policy Team will review the updates to ensure the relevant changes have been made. 
   1. Generally, ads will be reviewed by the Policy team within 24-48 hours. In certain cases, ads may take longer to be reviewed if a more comprehensive review is required.