Last updated: [Insert the date this policy is approved and published]
1. Who is responsible for your information?
This website is operated by [insert full legal entity name], trading as EastGrow Digital, at [insert registered or business address, if applicable]. For privacy questions, contact [insert privacy contact name or role] at [insert verified privacy contact email].
2. Information we collect
When you submit an enquiry, the website collects your name, email address, selected service, project details and privacy-consent timestamp. Phone number and budget are optional. The website also records the page from which the enquiry was sent. Please do not include sensitive or confidential information.
For abuse prevention, the service uses an IP-address-derived, keyed hash for rate limiting; the raw address is not stored in that rate-limit record. Administrator sign-in records may include session IP address and browser user-agent information. Complete this description for any hosting-provider access logs or other operational data collected.
3. Why we use information and our legal basis
Enquiry details are used to review and respond to project requests, manage follow-up and maintain related internal activity and email-delivery records. Administrator account and session data are used to operate and protect the private workspace. [Confirm the applicable legal basis for each purpose and whether any other use occurs.]
Enquiry details are stored in the configured PostgreSQL database. A notification containing enquiry details may be sent through the configured email service to the agency's notification recipient. [Identify the actual hosting, database, email and object-storage providers, their locations and any international transfers.]
4. Sharing and service providers
Access to enquiry information is limited to authorised workspace users. Configured hosting, database and email providers process information to operate the website and deliver enquiry notifications. [Name each provider, describe its role, identify other recipients and document international-transfer safeguards where applicable.]
5. Cookies and analytics
The private administrator workspace uses authentication session cookies. No analytics or advertising tags are configured in this project. [Confirm these statements for the deployed website and describe any additional cookies, consent controls or tracking tools before enabling them.]
6. Retention and security
Enquiry and activity records do not currently have an automatic retention purge. [Set and publish an approved retention period, including backups and email records, and explain how information is securely deleted when no longer needed.] Access to the admin workspace is account-based. [Describe only additional security practices that have actually been implemented.]
7. Your rights and choices
[Describe rights and choices available under the laws that apply to your visitors, how to make a request, and how identity will be verified. Add any applicable supervisory authority or complaint route.]
8. Children and changes
[State whether the website is directed to children and how this policy will be updated. Add an effective date when this completed version is published.]
9. Contact
Privacy enquiries: [insert verified contact email and any other contact details]. Legal entity: [insert full legal entity name and jurisdiction, as applicable].