This notice explains how [CONFIRM FULL LEGAL ENTITY NAME] uses personal information. It applies to [CONFIRM WEBSITE, CONTACT, CUSTOMER, SUPPLIER, SUPPORT AND MARKETING SCOPE].
Last updated: [DATE REQUIRED]
Who we are
Data controller: [FULL LEGAL ENTITY NAME]
Registered or principal address: [ADDRESS REQUIRED]
Company number: [IF APPLICABLE]
Privacy contact: [EMAIL/POSTAL CONTACT REQUIRED]
Do not infer these details from the brand name or domain.
Information we collect
Describe only information actually collected, potentially including:
- name, email address and message submitted through the enquiry form;
- correspondence by email or telephone;
- customer and supplier administration information;
- support records and authorised remote-access information;
- website technical or analytics data, if introduced;
- marketing preferences, if marketing is performed.
How and why we use personal information
Create a reviewed table covering each actual purpose, information category and lawful basis. Possible subjects to investigate include responding to enquiries, providing contracted services, administration, security, legal obligations and optional marketing.
No lawful basis should be selected without reviewing Aquila’s actual processing.
Sharing personal information
The website enquiry form is designed to use Cloudflare Pages and Cloudflare Turnstile to receive and protect submissions, and Resend to deliver the resulting email to Aquila. The owner must confirm these providers, their contractual roles, processing locations, safeguards and retention, and obtain legal review before publication.
Identify any other real recipient categories and processors, such as [OTHER HOSTING OR EMAIL PROVIDERS], professional advisers, software vendors or authorities where legally required. Name organisations where transparency requirements or legal advice indicate.
International transfers
How long information is kept
Provide actual retention periods or clear criteria for each record category. A retention schedule is required.
Security
Describe the organisational and technical approach accurately, without disclosing exploitable detail or promising absolute security. Security wording requires owner and technical review.
Individual rights
Website analytics
The current candidate does not use analytics or comparable tracking. The Contact page loads Cloudflare Turnstile for bot protection. Its technical and privacy implications are recorded in COOKIE_AUDIT.md and require owner/legal review before publication.
Contact and complaints
Privacy contact: [REQUIRED]
Supervisory authority information: [VERIFY CURRENT ICO WORDING AND LINK AT PUBLICATION]
Changes to this notice
Explain how updates will be dated and, where appropriate, communicated.