Legal / Privacy

Privacy should match the real data flow.

This prototype page is a structural placeholder only. Final legal text must be reviewed against the actual company entity, services, data flows, vendors, jurisdictions and operating model before publication.

Do not publish generic policy text as if it had been legally reviewed.

Legal review required before production.

What this page must eventually explain

The final Privacy Policy should identify the legal entity responsible for personal data, the categories of information collected, why it is used, the lawful basis where applicable, retention, sharing, international transfers, security, user rights and a verified privacy contact.

Forms and enquiries

The public enquiry form should collect only information needed to route and respond to a request. It should explicitly discourage passport numbers, payment-card details and unnecessary sensitive information.

Analytics and consent

The final policy must match the actual analytics, cookie, CRM, advertising and third-party tools deployed on the production site.