Privacy Policy
Data controller
The data controller details must be supplied and approved.
Enquiry information
The information collected through enquiry forms must be documented after the form is implemented.
Purpose and lawful basis
The purposes for processing and the lawful basis require solicitor-approved wording.
Retention
Retention periods must be confirmed.
Service providers
CRM and email providers must be confirmed.
Your rights
Rights under UK GDPR and the contact route for requests must be added.
Complaints
Information about how to complain to the ICO must be added.