POLICY REVIEW COPY
Privacy Policy
Draft for review. Not an approved agreement or operative policy.
Status and controller
Review draft only. Skylatek Ltd is the proposed controller for website enquiries. Confirm the correspondence address, privacy contact and any registration obligations before enabling public collection.
Information and purposes
The supplied enquiry system collects name, email, enquiry category, optional website and package choice, message and privacy acknowledgement. It uses this to review and respond to the enquiry. It does not add people to a marketing list. Confirm any additional production logging, analytics and supplier processing.
Lawful basis and recipients
Confirm an appropriate lawful basis for each activity, such as steps requested before a contract or legitimate interests where applicable. A privacy acknowledgement is not marketing consent. Identify hosting, email and other recipients, processor contracts, transfers and safeguards after configuration.
Retention and security
The plugin defaults to 90 days of enquiry retention with daily scheduled cleanup. Notifications contain a reference and protected admin link, not the enquiry message. Production backups, host access logs and email copies may have separate retention; verify and describe them before approval.
Rights and complaints
The final notice should explain applicable rights, how requests are made, identity checks and the right to complain to the UK Information Commissioner. Confirm whether any automated decisions occur, the source of data and whether fields are required. Document how enquiries are found and erased in administration.