Privacy notice.
Draft for review before launch.
Who is responsible for your information
The data controller is [LEGAL BUSINESS NAME AND ADDRESS]. Contact: [PRIVACY EMAIL].
Information we may collect
We may collect your name, contact details, project location, project type, budget range, expected dates, messages and documents you choose to provide. Basic technical information may also be processed by the website host for security and delivery.
How we use it
- To respond to enquiries and prepare requested proposals.
- To deliver and administer agreed professional services.
- To keep appropriate financial, contractual and professional records.
- To protect the website and comply with legal obligations.
Lawful bases
Depending on the context, processing may be necessary to take steps at your request before entering a contract, to perform a contract, to meet a legal obligation, or for legitimate interests such as managing enquiries and protecting the practice. [REVIEW AND CONFIRM]
Sharing and storage
Information may be shared with service providers that support email, document storage, professional administration, website hosting and accountancy, under appropriate arrangements. Cloudflare hosts this website. [LIST ACTUAL PROCESSORS AND INTERNATIONAL TRANSFER SAFEGUARDS]
Retention
Enquiry and project records are kept only as long as needed for the relevant purpose and applicable legal or professional requirements. [INSERT RETENTION SCHEDULE]
Your rights
UK data-protection law may give you rights to access, correct or erase information, restrict or object to processing, and request portability. You may complain to the Information Commissioner’s Office. Some rights depend on the circumstances and lawful basis.
Contact and updates
Questions should be sent to [PRIVACY EMAIL]. Last updated: [DATE].