Privacy Policy

PUBLICATION HOLD: this is a drafting structure, not an operative privacy notice until the owner supplies the full controller name, registered address, privacy contact, actual processors, lawful bases and retention periods. Do not invent them. Controller: [VERIFIED LEGAL NAME]. Address: [VERIFIED ADDRESS]. Privacy contact: [VERIFIED EMAIL]. Effective date: [ACTUAL PUBLICATION DATE].

An enquiry process may require a name, business email, company, website, country, service interest, indicative budget and the submitted message. Record only what is necessary for the stated purpose. Do not request sensitive personal information in a general marketing brief.

Document the applicable lawful basis for responding to an enquiry, managing a business relationship, measuring site performance and referring a request to a separately identifiable partner. Do not bundle unrelated purposes into one checkbox. Optional partner referral requires a clear explanation and an appropriate legal basis.

If referrals are introduced, explain which categories of partner may receive information, the destination country, the purpose of transfer, the user's choice and how to withdraw consent when consent is relied on. Do not send a lead solely because a form was submitted.

Describe the actual cookies, storage technologies, analytics vendors and choice mechanism configured in production. Nonessential tracking must respect applicable consent requirements. Do not state Google Analytics or any specific processor is in use until verified.

State a concrete retention schedule for enquiry data and a justified deletion or anonymisation process. Access to lead logs must be role-based, and data should not be present in public HTML or browser source. Specify actual measures only after implementation.

Explain the rights relevant to the person's jurisdiction, how to request access, correction or deletion, how to object or withdraw consent when applicable, and how to contact the relevant supervisory authority. Provide a working reply channel and truthful response time wording.

Describe verified cross-border transfers and safeguards, if any. Date substantive revisions and keep the notice consistent with the live form, CRM, hosting and partner agreements.

DRAFT/HOLD — do not publish bracketed placeholders, provide unverified compliance statements or activate data collection until legally completed.

• Contact and enquiry process →