Privacy policy
Last updated: [LAST UPDATED DATE]
This page is a scaffold, not a finished legal document. Every highlighted blank must be filled in with the owner's real details — including choosing whether the analytics section applies — and the whole page should be checked by a qualified professional before it goes live. Nothing on it should be relied on as legal advice.
Who is responsible (the controller)
[FULL LEGAL NAME][STREET ADDRESS]
[POSTCODE, CITY], [COUNTRY]
Email: [EMAIL]
Full company details are on our imprint page.
What we collect, and why
- Visiting this site. Our host, Netlify, automatically processes technical server log data for every visitor. See "Hosting" below.
- Booking a discovery call. The link on this site hands off to a third-party scheduling tool, [SCHEDULING TOOL — not yet chosen], which collects what you give it there — typically your name, email address, and the time you choose.
- Emailing us. If you write to us directly, we keep your email address and message only to answer you.
Legal basis
We process this data under the following bases in Art. 6(1) GDPR:
- Server logs: point (f), our legitimate interest in running and securing this site.
- Booking a call and any correspondence: point (b), steps you request before entering into a contract with us.
- Analytics, if used: point (a), your consent.
Hosting
This site is hosted by Netlify, Inc. To deliver pages and keep the site secure, Netlify's servers process technical log data for each request — typically the visitor's IP address, request time, page requested, and browser type. This happens for every visitor and is separate from anything described elsewhere on this page. See Netlify's own privacy policy for how it handles this data, and add [NETLIFY DATA PROCESSING TERMS / SUB-PROCESSOR DETAILS — if a data processing agreement is in place] here if applicable.
Booking a discovery call
The "Book a discovery call" link is expected to open a third-party scheduling tool: [SCHEDULING TOOL — not yet chosen]. Once a tool is chosen, this section must name it, link to its own privacy policy, and describe what it collects and how long it keeps it.
Analytics
Keep only the paragraph below that matches reality, and delete the other one.
If analytics are used — We use [ANALYTICS TOOL — e.g. Plausible, Fathom, Google Analytics] to understand how visitors use this site. [DESCRIBE WHAT IT COLLECTS, WHETHER IT SETS COOKIES, AND HOW TO OPT OUT].
If analytics are not used — This site does not use analytics, tracking cookies, or advertising pixels of any kind.
How long we keep data
- Server logs: [RETENTION PERIOD, e.g. 30 days]
- Email correspondence: [RETENTION PERIOD]
- Booking data: kept according to [SCHEDULING TOOL]'s own retention policy
Your rights
Under the GDPR you have the right to access the data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, contact us at [EMAIL].
Complaints
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement. Our lead supervisory authority is [SUPERVISORY AUTHORITY — e.g. the state data protection authority where the company is registered].