Legal
Privacy Policy
Last updated: [ADD DATE]
[LEGAL REVIEW REQUIRED]
This page is a structural placeholder written to show what needs to be covered. It is not legal advice and is not fit to publish as it stands. Every section must be drafted or approved by a qualified legal professional for each country in which this website operates — including the United Kingdom and every European Union member state you sell into or market to.
1. Who is the data controller
[ADD REGISTERED COMPANY NAME AND ADDRESS] is the controller of personal data collected through this website. [ADD DATA PROTECTION CONTACT — AND DPO DETAILS IF ONE IS APPOINTED]
2. What we collect
When you use the contact form we collect the name, email address, subject, optional batch number and message you provide, together with your consent record. [LEGAL REVIEW REQUIRED — list every other category of data collected, including any analytics, hosting logs and newsletter data.]
3. Why we use it, and our lawful basis
[LEGAL REVIEW REQUIRED — set out each purpose and its lawful basis under UK GDPR and EU GDPR, e.g. consent, contract, legitimate interests.]
4. Who we share it with
[LEGAL REVIEW REQUIRED — name your processors, e.g. website host, form provider, email provider, and describe any international transfers and the safeguards used.]
5. How long we keep it
[LEGAL REVIEW REQUIRED — retention periods for each category of data.]
6. Your rights
Under UK and EU data protection law you have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. [LEGAL REVIEW REQUIRED — explain how to exercise each right and your response timescales.]
7. Complaints
You may complain to the supervisory authority in your country. In the United Kingdom this is the Information Commissioner’s Office. [LEGAL REVIEW REQUIRED — add the relevant EU supervisory authority and any EU representative required under Article 27.]
8. Changes to this policy
[LEGAL REVIEW REQUIRED]
Questions about this page? Contact PEP-T.