Transparency about form data
Privacy Policy
This text explains what data the current site receives through its forms and which points still require final approval by the site administrator.
Reviewable draft; site administrator approval required
Plain-language summary
Form information is recorded to respond to that request. Explicit consent is required. This site does not store IP addresses or User-Agent strings in lead records, and records are automatically deleted after 180 days. The official email for privacy requests still needs to be finalized.
What data is collected?
The contact form may collect a name, phone number, optional email, service subject, message text, and source-page URL. The newsletter form records an email address and, if provided, a name.
What is the data used for?
- Responding to a question or project-review request
- Coordinating document intake and continuing the same request discussion
- Sending a newsletter only to a user who consented to subscribe
- Limiting repeated submissions and form abuse
Submitting the contact form does not automatically subscribe a user to the newsletter. Each path requires separate consent.
How are storage and access handled?
In the current implementation, form requests are stored as private records in WordPress administration. Access should be limited to authorized site administrators. If a valid recipient email is configured, an email notification may also be sent for follow-up.
Administrative access levels, the web host, and the backup policy must be reviewed by the site owner before public release.
Technical data, cookies, and abuse control
IP addresses and User-Agent strings are not stored in lead records. To limit repeated submissions, a one-way, non-recoverable identifier may be created temporarily.
WordPress or active plugins may use cookies for administrator login, security, settings, or essential operation. The final cookie list must be reviewed after active plugins and analytics tools are confirmed and then recorded here.
How long is data retained?
The current operational policy permanently deletes private lead records after 180 days. Cleanup runs daily, and the administrator can change the period from 30 to 3,650 days in WordPress general settings.
Legal confirmation required: The 180-day period and backup policy must be checked against contractual duties and the requirements of the operating jurisdiction before public release.
How can you make a request about your data?
You may call the published site numbers to request access to, correction of, or deletion of form information. To locate the record, you may be asked for the phone number or email used in the form.
An official email address for privacy requests still needs to be established and approved. Until then, the stated channel is telephone contact.
Hosting and external services
Site data may be processed in hosting infrastructure and backups. If an external email, analytics, map, or anti-spam service is enabled, its provider, processing location, and policy link must be added here.
The Google Maps link on the contact page takes the user to an external website, and its use is subject to that service terms and policy.
Review and changes to this text
This version is a draft. The final text must match the official domain, data controller, contact email, retention period, external-service list, and legal requirements of the operating jurisdiction. An effective date must be added after final approval.
