Websites should have a privacy policy, easily accessible for all visitors, and also linked to from appropriate places on the site.