Legal

Privacy notice

[DRAFT, NEEDS REVIEW] This page is a placeholder. It is not a privacy notice, and nothing on it is final or binding.

An outline of what the final notice needs to cover, for whoever writes it. Every [BRACKETED] item is to be filled in or confirmed.

Who we are

[COMPANY LEGAL NAME, REGISTERED ADDRESS, COMPANY NUMBER, CONTACT FOR PRIVACY QUESTIONS]

What this notice covers

[THIS SITE, THE SIGN-UP FORM, AND THE ACCOUNTS OF PEOPLE WHO USE PURRCRM. WHETHER IT ALSO COVERS THE DATA CUSTOMERS SEND ABOUT THEIR OWN USERS, OR WHETHER A SEPARATE DATA PROCESSING AGREEMENT DOES.]

What we collect

• [SIGN-UP: EMAIL ADDRESS, PASSWORD (STORED HASHED), WORKSPACE AND APP NAMES]
• [ACCOUNT USE: SIGN-INS, THE ADDRESS AND DEVICE THEY CAME FROM, AN AUDIT LOG]
• [THIS SITE: WHETHER IT SETS COOKIES OR USES ANALYTICS (TODAY IT USES NEITHER), AND SERVER LOGS]
• [BOT CHECK: CLOUDFLARE TURNSTILE, IF TURNED ON]

Why, and on what lawful basis

[EACH PURPOSE AND ITS LAWFUL BASIS UNDER UK GDPR / EU GDPR]

Who we share it with

[HOSTING, EMAIL DELIVERY AND OTHER PROCESSORS, AND WHERE THEY ARE]

How long we keep it

[RETENTION PERIODS. FOR EXAMPLE: AN UNCONFIRMED SIGN-UP IS DELETED AFTER IT EXPIRES; A DELETED WORKSPACE IS ERASED AFTER ITS GRACE PERIOD. CONFIRM THE FIGURES.]

Your rights

[ACCESS, CORRECTION, ERASURE, OBJECTION, PORTABILITY; HOW TO ASK; THE RIGHT TO COMPLAIN TO THE ICO OR A LOCAL AUTHORITY]

Changes to this notice

[HOW CHANGES ARE ANNOUNCED] Last updated: [DATE].