Privacy policy
Draft baseline text — replace placeholders, add legal entity details, lawful bases, retention schedules, subprocessors, and EU representative clauses as required by your setup and counsel. Not legal advice.
Who we are
[Legal entity name], [registered address], [contact email]. Where EU GDPR applies, [data protection contact / DPO email if applicable].
What data we collect
When you use the contact form, we process: name, email, optional organisation, your message, and technical metadata supplied by your browser or form provider (e.g. timestamps, IP address — depending on your endpoint).
Purposes and lawful bases
We process enquiries to respond to your request and, if you become a client, to deliver services. Lawful bases may include contract, legitimate interests (responding to business enquiries), or consent where required — confirm with your counsel.
Recipients and transfers
If you use a third-party form host (e.g. Formspree) or email provider, data may be processed outside your country. Document appropriate safeguards (SCCs, adequacy, etc.).
Retention
Enquiry data is kept only as long as needed to handle the request and any follow-up, unless a longer period is required by law or contract — define concrete periods.
Your rights
Depending on applicable law, you may have rights to access, rectification, erasure, restriction, portability, and objection. You may lodge a complaint with your supervisory authority.
Cookies
This static template does not set non-essential cookies by default. If you add analytics or embeds, update this section and your consent mechanism.