Last updated: [date]
This policy explains how personal data is collected and used when you visit this website (the Site), operated by [name / practice name] (we, us). We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018. [Adjust for your jurisdiction.]
Data We Collect
Contact form: name, email address and the content of your message, used to respond to your enquiry.
Comments (if enabled): name, email and comment content.
Technical data: IP address, browser type and pages visited, collected through server logs and any analytics tool in use [name it, e.g. none / a privacy-friendly analytics tool].
How We Use Data
We use personal data to respond to enquiries, operate and secure the Site, and understand how the Site is used. The lawful bases are legitimate interests (running the Site and practice) and, where applicable, consent.
Directory Data
The directory lists practitioners and organisations using information from public sources [or: submitted by the listed parties]. If you are listed and want your entry corrected or removed, contact us and we will act promptly.
Sharing
We do not sell personal data. Data is shared only with service providers that host and support the Site (including our hosting provider) under appropriate safeguards, or where required by law.
Retention
Enquiry emails are kept for [period]. Server logs are retained by our hosting provider for a limited period. Mediation-related correspondence is handled under separate engagement terms.
Your Rights
You have rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to the Information Commissioner’s Office (ICO) [or your local authority]. To exercise any right, use the contact form.
Cookies
See the Cookies page for details of the cookies used by the Site.