Template. This is a starting draft, not legal advice. Replace everything in [square brackets], check it matches what you actually do, and have it reviewed before the site goes live. Delete this box when done.

Privacy policy

Last updated: [date]

Who we are

[Company name], trading as AIDA, registered in [England and Wales], company number [number], registered office [address]. We are the controller of the personal data described here. Contact: [email address]. [ICO registration number, if applicable.]

What we collect

When you use the contact form we collect the details you give us: your name, work email address, organisation, organisation size, area of interest and your message. If you book a call through our scheduling tool, that provider also collects the details you enter there.

Why we use it, and our lawful basis

• To reply to your enquiry and, if you ask, to prepare a proposal. Lawful basis: taking steps at your request before entering a contract, and our legitimate interests in running our business.
• To keep a record of our correspondence. Lawful basis: legitimate interests.
• [If you send marketing emails: only with your consent, and you can withdraw it at any time.]

Who we share it with

We use trusted providers to run the site and handle enquiries: [form provider, e.g. Formspree], [scheduling provider, e.g. Calendly], [email provider], and [hosting provider]. They process data on our behalf under their own terms. We do not sell your data. [Note any transfers outside the UK and the safeguard used.]

Cookies and similar technologies

[Choose one and delete the other.] This site does not use cookies for tracking or advertising. / This site uses [analytics tool] to understand how the site is used. [Describe cookies, and add a consent banner if you use non-essential cookies.]

The site loads fonts from Google Fonts, which means your browser contacts Google when the page loads. [If you self-host the fonts before launch, delete this paragraph.]

How long we keep it

Enquiries that do not lead to work are kept for [12 months] and then deleted. If we work together, we keep records for as long as the law requires, for example for tax purposes. [Adjust to your practice.]

Your rights

Under UK data protection law you can ask to see the data we hold about you, correct it, delete it, restrict or object to our use of it, and request a copy to move elsewhere. Email [email address] and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes

We will update this page if our practices change and show the date at the top.