LEGAL · PRIVACY
Privacy Policy
This policy explains how personal information may be collected and used when someone visits this portfolio, sends an enquiry or works with the service provider.
Last updated: 26 July 2026
BEFORE PUBLISHING
Replace the bracketed details, remove processing activities you do not use, and add every analytics, form, hosting or marketing provider connected to the published site.
01
Who is responsible for your data
The data controller is [Legal name / trading name], located at [Business address]. Privacy questions and requests can be sent to [Privacy email]. Add the contact details of a data protection officer if one has been appointed.
02
Information collected
Information may include your name, email address, company, project details and anything you choose to send through the contact form or email. The site may also receive basic technical information such as IP address, browser, device, referral page and timestamps from hosting or security systems.
03
How information is collected
Information is collected directly when you contact the service provider, request a proposal, subscribe to an update or enter into a contract. Limited technical information may be collected automatically when the website is delivered to your device.
04
Purposes and legal bases
Personal data may be used to answer enquiries, prepare proposals, deliver services, manage contracts and invoices, secure the website, comply with legal duties and improve the site. Depending on the activity, the legal basis may be consent, steps requested before a contract, performance of a contract, a legal obligation or a legitimate interest that does not override your rights.
05
Contact forms and professional enquiries
When you submit a form, the information is used to respond and manage the potential professional relationship. Mark required fields clearly, identify where submissions are sent, and do not request sensitive information unless it is necessary and lawfully handled.
06
Analytics, cookies and similar technologies
This template does not assume that analytics or advertising cookies are enabled. If you add analytics, embeds, pixels or marketing tools, name each provider, explain its purpose and duration, state the legal basis, and provide consent controls where required. Essential storage used for security or site operation should also be described.
07
Service providers and recipients
Personal data may be shared with carefully selected providers that support hosting, email, forms, analytics, invoicing, cloud storage, project management or professional advice. List the providers actually used and ensure appropriate data-processing terms are in place. Information may also be disclosed when required by law.
08
International data transfers
Some providers may process data outside your country or the European Economic Area. Where required, use an approved transfer mechanism and suitable safeguards, such as an adequacy decision or standard contractual clauses. Identify the relevant providers and safeguards before publishing.
09
How long information is kept
Keep personal data only for as long as needed for the purpose for which it was collected, including legal, accounting and dispute requirements. Replace this text with specific periods, for example: unanswered enquiry data [period], client records [period], invoices [period] and analytics data [period].
10
Your rights
Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive portable data and withdraw consent at any time. You may also lodge a complaint with the competent data protection authority. Requests can be sent to [Privacy email].
11
Security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, alteration, loss or disclosure. No online system is completely secure, so security measures are reviewed and updated in proportion to the information handled.
12
Children’s privacy
This website and its professional services are not directed to children. Do not intentionally collect personal data from children. If you learn that such data has been submitted, take appropriate steps to remove it and comply with applicable law.
13
Changes, questions and complaints
This policy may be updated when the website, service providers or legal requirements change. The current date is shown at the top of the page. For questions, rights requests or complaints, contact [Legal name] at [Privacy email] or [Business address].