This notice contains generic drafting prompts and does not constitute legal advice.
1. Who we are
[Insert the full legal name of the controller, registered address, registration details, and official privacy contact information.]
2. Information we may collect
Depending on the final website and enquiry process, information may include contact details, organisation and role information, enquiry content, technical logs, analytics identifiers, cookie preferences, and correspondence records.
3. How information may be collected
Describe each actual collection point, including website forms, email, telephone, analytics, cookies, recruitment channels, events, third-party referrals, and customer or supplier interactions.
4. Purposes and legal bases
For every purpose, specify the applicable legal basis in each relevant jurisdiction. Possible purposes may include responding to enquiries, developing business relationships, delivering services, maintaining security, complying with law, and improving the website.
5. Sharing and processors
List the categories of recipient and relevant providers, such as hosting, analytics, CRM, email, security, professional advisers, and authorities. Reflect actual contractual and transfer safeguards.
6. International transfers
Explain whether personal information is transferred internationally, where it is processed, and which approved safeguards apply.
7. Retention
State retention periods or decision criteria for each category of information. Align the notice with approved record-retention and deletion processes.
8. Security
Describe security practices accurately without revealing sensitive implementation details or making unsupported guarantees.
9. Your rights
Explain applicable rights, how to exercise them, identity-verification requirements, response timelines, and the right to complain to a relevant supervisory authority.
10. Cookies and analytics
Replace this section after analytics and consent technologies are selected. Include cookie categories, purposes, lifetimes, providers, consent choices, and links to settings.
11. Changes to this notice
Explain how updates will be communicated and include an effective date and version history.
12. Contact
[Insert approved privacy contact details and any data protection officer or representative information required by law.]