Privacy notice

Draft template — must be reviewed and completed before launch. Replace every placeholder with your actual legal entity, contact details, controller details, lawful bases, retention periods, processors and international transfer arrangements. This page is not legal advice and does not by itself make a website GDPR-compliant.

Who is responsible?

[Insert legal entity name, registered address and privacy contact email] is responsible for the personal data described here, unless you are told otherwise.

What information do we collect?

If you submit an enquiry, we collect the information you enter: name, email, country of residence, optional phone number, enquiry topic and optional message. Please do not send identity documents or sensitive personal data through this form.

Why do we use it?

We use enquiry data to respond to your request and take steps at your request before any service contract. We use data for marketing only where a valid legal basis applies, including consent where required. Optional marketing consent is separate and can be withdrawn.

Who receives it?

Access should be limited to authorised staff and contracted service providers needed to operate the enquiry process. Add the actual hosting, CRM, analytics and communication providers used by your organisation.

International transfers and retention

Explain whether data is accessed or stored outside the EEA/UK, the applicable safeguards, and how long each category is retained. Adopt and follow a documented retention and deletion schedule.

Your rights and complaints

Depending on the applicable law, you may have rights to access, correct, erase, restrict or object to processing, data portability, and to withdraw consent. Contact [privacy email]. You may also complain to the competent supervisory authority.

Security

Use access controls, strong authentication, least-privilege rules, secure devices and an incident response process. No online system can guarantee absolute security.

Last reviewed: [insert date]