<?php
/**
 * Industry flags: extra checks that apply wherever the business is based.
 *
 * Each check: [ regex the privacy policy should match, issue title, why, suggested wording key ].
 *
 * @package GoConsent
 */

namespace GoConsent\Rules;

defined( 'ABSPATH' ) || exit;

/**
 * Industry rules.
 */
class Industries {

	/**
	 * All industries.
	 *
	 * @return array
	 */
	public static function all() {
		$all = array(
			'health'  => array(
				'label'  => __( 'Health', 'goconsent' ),
				'desc'   => __( 'Clinics, therapy, fitness, supplements, telehealth.', 'goconsent' ),
				'checks' => array(
					array(
						'id'      => 'health_sensitive',
						'req'     => 'sensitive',
						'pattern' => 'sensitive|health data|consumer health',
						'title'   => __( 'Your privacy policy doesn’t cover health or other sensitive data.', 'goconsent' ),
						'why'     => __( 'Health data is “sensitive” under most state laws and needs opt-in consent.', 'goconsent' ),
					),
				),
			),
			'kids'    => array(
				'label'  => __( 'Kids', 'goconsent' ),
				'desc'   => __( 'Sites aimed at or used by people under 18.', 'goconsent' ),
				'checks' => array(
					array(
						'id'      => 'kids',
						'req'     => 'kids',
						'pattern' => 'children|under (13|the age of 13)|COPPA|minor',
						'title'   => __( 'Your privacy policy doesn’t address children’s data.', 'goconsent' ),
						'why'     => __( 'COPPA requires parental consent for children under 13.', 'goconsent' ),
					),
				),
			),
			'realestate' => array(
				'label'  => __( 'Real estate', 'goconsent' ),
				'desc'   => __( 'Listings, agents, brokerages, rentals. Maps and video tours load by default.', 'goconsent' ),
				'checks' => array(
					array(
						'id'      => 'realestate_media',
						'req'     => 'third_party',
						'pattern' => 'Google Maps|map provider|video (tour|host)|YouTube|Vimeo',
						'title'   => __( 'Your privacy policy doesn’t mention the maps and video tours on your listings.', 'goconsent' ),
						'why'     => __( 'Maps and videos load from Google, YouTube or other providers by default on real estate sites, so the policy should say so and explain how to turn them off.', 'goconsent' ),
					),
				),
			),
			'restaurant' => array(
				'label'  => __( 'Restaurant', 'goconsent' ),
				'desc'   => __( 'Restaurants, bars, cafés, catering. Reservation and ordering widgets always work; maps load by default.', 'goconsent' ),
				'checks' => array(
					array(
						'id'      => 'restaurant_reservations',
						'req'     => 'third_party',
						'pattern' => 'reservation|OpenTable|Resy|Tock|SevenRooms|booking (partner|service|provider)',
						'title'   => __( 'Your privacy policy doesn’t say who handles reservations and online orders.', 'goconsent' ),
						'why'     => __( 'Guests’ names, phone numbers and party details go to your reservation or ordering service, so the policy should name them.', 'goconsent' ),
					),
					array(
						'id'      => 'restaurant_dietary',
						'req'     => 'health_policy',
						'pattern' => 'allerg|dietary',
						'title'   => __( 'Your privacy policy doesn’t cover allergy and dietary notes.', 'goconsent' ),
						'why'     => __( 'Allergy and dietary notes tied to a guest can count as consumer health data under Washington, Nevada and Connecticut law.', 'goconsent' ),
					),
					array(
						'id'      => 'restaurant_loyalty',
						'req'     => 'incentive',
						'pattern' => 'loyalty|rewards|financial incentive',
						'title'   => __( 'Your privacy policy doesn’t cover loyalty, rewards or gift card programs.', 'goconsent' ),
						'why'     => __( 'The CCPA requires a “Notice of Financial Incentive” for loyalty and rewards programs once a business meets its size thresholds. If you don’t run one, mark this handled.', 'goconsent' ),
					),
					array(
						'id'      => 'restaurant_marketing',
						'req'     => 'none',
						'pattern' => 'text message|SMS|unsubscribe|opt[ -]?out of (marketing|promotional)',
						'title'   => __( 'Your privacy policy doesn’t explain marketing emails and text messages.', 'goconsent' ),
						'why'     => __( 'Federal texting and email laws require opt-in and an easy way to stop; mobile carriers also require your privacy policy to cover text messaging before they approve business texting.', 'goconsent' ),
					),
				),
			),
			'finance' => array(
				'label'  => __( 'Finance', 'goconsent' ),
				'desc'   => __( 'Lending, insurance, tax, banking, investment.', 'goconsent' ),
				'checks' => array(
					array(
						'id'      => 'finance',
						'req'     => 'finance',
						'pattern' => 'Gramm|GLBA|financial information|nonpublic personal',
						'title'   => __( 'Your privacy policy doesn’t explain how financial information is handled.', 'goconsent' ),
						'why'     => __( 'Federal GLBA rules apply to financial services.', 'goconsent' ),
					),
				),
			),
		);

		/**
		 * Filter the industry rules.
		 *
		 * @param array $all Industries.
		 */
		return apply_filters( 'goconsent_industries', $all );
	}
}