Draft for professional legal review. Placeholders in [brackets] must be replaced in Azikiel → Business settings and in this page before publication.
This policy explains what personal data this website collects, why, on what legal basis, how long it is kept and what rights you have.
1. Controller
The controller responsible for data processing on this website is [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [COUNTRY]. Contact: [CONTACT EMAIL]. [If a data protection officer is appointed, insert name and contact details here; otherwise delete this sentence.]
2. Data we collect and why
Opportunity Scan
When you complete the Opportunity Scan we process your answers to the scan questions, your name, email address and company name if you choose to provide them, the time you gave consent, and a hashed (one-way, non-reversible) form of your IP address used solely to limit abuse and repeated submissions. Purpose: to calculate and show your fit score and package suggestion, to send you the result if you request it, and to contact you about the result if you have asked us to.
Contact form
When you use the contact form we process your name, email address, company name, your message, the time you gave consent and a hashed IP address for rate limiting. Purpose: to answer your enquiry and, where you ask about our services, to prepare a proposal.
Server logs
Our hosting provider records technical access data (requested page, time, browser type, referring page, IP address) in server logs for security and operation of the site. Logs are retained for [LOG RETENTION PERIOD] and then deleted.
Analytics
By default this website runs no analytics or marketing tracking. [If an analytics tool is configured: name the tool, the provider, the data collected, whether IP addresses are shortened, the legal basis and how to object. Otherwise state that no analytics are used.]
3. Legal basis
- Consent (Art. 6(1)(a) GDPR / UK GDPR) for the Opportunity Scan and for any follow-up you request. You can withdraw consent at any time by emailing [CONTACT EMAIL]; withdrawal does not affect processing before that point.
- Steps prior to entering into a contract (Art. 6(1)(b)) for contact-form enquiries about our services and for preparing proposals.
- Legitimate interest (Art. 6(1)(f)) in the secure and reliable operation of the website for server logs and the hashed IP address used for rate limiting.
4. Retention
Scan and contact submissions are stored for [RETENTION PERIOD, as configured in Azikiel → Business settings] and then deleted, unless a business relationship has started, in which case the data is kept for the duration of that relationship and any statutory retention periods. Hashed IP addresses used for rate limiting are deleted after [SHORT PERIOD, e.g. 24 hours].
5. Recipients and processors
Data is stored on this website’s hosting infrastructure operated by [HOSTING PROVIDER, LOCATION] under a data-processing agreement. Emails are sent via [EMAIL PROVIDER]. [List any further processors, e.g. CRM, with location.] We do not sell personal data and do not share it with third parties for their own marketing. Where a processor is located outside the EU/EEA or the UK, transfers are based on [TRANSFER MECHANISM, e.g. adequacy decision or standard contractual clauses].
6. No profiling or automated decisions
The Opportunity Scan calculates a score from your answers using fixed, published rules. It is an informational estimate and does not produce decisions with legal or similarly significant effects on you. We do not use your data for profiling or for automated decision-making in the sense of Art. 22 GDPR.
7. Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent. To exercise these rights, contact [CONTACT EMAIL]. You also have the right to lodge a complaint with a supervisory authority, in particular [SUPERVISORY AUTHORITY] in [COUNTRY].
8. Security
The website is served over an encrypted connection (HTTPS). Form submissions are protected against automated abuse. Access to stored submissions is restricted to authorised personnel.
9. Changes
We update this policy when the website or the processing changes. The current version is always available on this page. Last updated: [DATE].