Third-Party Vendors

Vendors should specify what data will be collected, who has access to that data, what that data will be used for, and how (and when) that data will be deleted.