13. Don’t put anyone’s email addresses on the firm’s website. Use a general email address as a distribution group or a mailbox that is checked regularly. Email addresses often are the same as the domain login. It will also invite spam and spoofing attacks.