Privacy should match the real data flow.
This prototype page is a structural placeholder only. Final legal text must be reviewed against the actual company entity, services, data flows, vendors, jurisdictions and operating model before publication.
What this page must eventually explain
The final Privacy Policy should identify the legal entity responsible for personal data, the categories of information collected, why it is used, the lawful basis where applicable, retention, sharing, international transfers, security, user rights and a verified privacy contact.
Forms and enquiries
The public enquiry form should collect only information needed to route and respond to a request. It should explicitly discourage passport numbers, payment-card details and unnecessary sensitive information.
Analytics and consent
The final policy must match the actual analytics, cookie, CRM, advertising and third-party tools deployed on the production site.