Draft for review. This document was prepared as a starting point only. It is not legal advice and it has not been reviewed by an attorney. Before publishing, a qualified lawyer in your jurisdiction must review and adapt it, and every item marked in square brackets must be completed. Sections marked ATTORNEY REVIEW need particular attention.
Last updated: [insert date]
This policy explains how [Legal entity name], trading as Channelwright ("we", "us"), collects and uses personal information when you visit our website or enquire about our services.
Who we are
[Legal entity name], [registered address], United States. Contact: [privacy contact email].
Information we collect
Information you give us
When you complete a contact form, audit request or consultation request, we collect the details you enter, which may include your name, business name, work email address, phone number, website address, country, information about your sales channels, indicative revenue and advertising budget ranges, and the content of your message.
Information collected automatically
When you browse the site we may collect technical information such as IP address, browser type, device type, pages visited, referring source and time spent, through cookies and similar technologies. See our cookie policy.
Information we do not want
Please do not send us passwords, account credentials, payment card numbers, bank details, government identification numbers or other sensitive personal data through our forms. We do not request this information and will delete it if received.
How we use your information
- To respond to your enquiry and provide the audit or consultation you requested
- To prepare proposals and deliver services if you become a client
- To maintain business records and manage our relationship with you
- To send marketing communications where you have consented, with an unsubscribe option in every message
- To improve our website and understand how it is used
- To comply with legal obligations
Legal basis
[ATTORNEY REVIEW] Where the GDPR or UK GDPR applies, we rely on consent, legitimate interests and the performance of a contract as our legal bases. Your attorney should confirm the correct basis for each processing activity.
Sharing your information
We may share information with service providers who help us operate, including our website platform, email and CRM providers, analytics providers and professional advisers. These providers process data on our instructions. We do not sell your personal information. We may disclose information where required by law.
International transfers
[ATTORNEY REVIEW] Our service providers may process data outside your country. Appropriate safeguards should be described here based on the providers you actually use.
Retention
We keep enquiry data for [insert period] and client records for [insert period], unless a longer period is required by law.
Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or object to our use of your personal information, to withdraw consent, to data portability, and to opt out of the sale or sharing of personal information. Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws may have additional rights. [ATTORNEY REVIEW: confirm which state laws apply to your business and add the required disclosures.] To exercise a right, contact [privacy contact email].
Children
Our services are intended for businesses. We do not knowingly collect information from anyone under 16.
Security
We take reasonable technical and organisational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes
We may update this policy. The date at the top shows when it was last revised.
Contact
Questions about this policy: [privacy contact email], [registered address].