Review draft — confirm business and legal details before launch.
This page is a working outline, not the finished policy. It sets out the subject areas the approved privacy policy has to cover, so nothing important is missed and nothing is stated before it is true.
No effective date is shown, and no company details, providers, retention periods, or jurisdictions are named yet. Everything that depends on a business decision is marked “To be confirmed”.
Each item below is a section the approved policy needs. The description explains what belongs there in plain language; the confirmations underneath are the facts that have to come from the business before the section can be written.
What a visitor types into the project inquiry form — name, business details, budget range, timeline, and whatever they choose to describe about the work.
Information a browser sends automatically when a page loads, such as device and browser type, approximate location, pages viewed, and how a visitor arrived.
Small files and equivalent storage used to keep the site working, remember preferences, or measure how the site is used — and how a visitor can control them.
The outside companies that handle information on the business’s behalf so the site can run — for example hosting, form delivery, or scheduling.
The reasons information is handled at all: replying to inquiries, preparing proposals, delivering agreed work, keeping the site secure, and meeting record-keeping obligations.
When information leaves the business — service providers acting on instructions, professional advisers, or a legal requirement — and the commitment that it is not sold.
How long inquiry records, project files, and site logs are kept, and what happens to them afterwards.
The practical measures taken to protect information, stated honestly, without promising that any system is completely secure.
How a person asks to see, correct, or delete their information, or asks that it no longer be used for a particular purpose.
A statement that the site is intended for business audiences and is not directed to children, plus what happens if a child’s information is submitted anyway.
Whether information is handled outside the country it was collected in, and what protections apply if it is.
How updates are made and how visitors will know the policy has changed.
The route for privacy questions and requests. For now, use the contact page.
If something here looks wrong, incomplete, or out of step with how the business actually works, send a note through the contact page and it will be worked into the approved version.