Privacy notice — draft for review

This starter policy must be reviewed and completed by the organisation operating the website before launch.

Information submitted through forms

The site may ask for a name, email address, country/time zone, organisation and enquiry message. Collect only information needed to respond.

Purpose and retention

Before launch, specify the legal entity, lawful basis, retention period, access controls, processors and contact details. Delete enquiries when no longer needed, subject to legal obligations.

Children and student data

Do not use this starter to store grades, diagnostic results, health data, safeguarding reports or other sensitive student information. A production student platform needs a separate privacy and safeguarding design, appropriate consent/authorisation and secure access controls.

Cookies and analytics

Add analytics or advertising technologies only after assessing applicable consent and transparency requirements. This starter does not include third-party analytics by default.

Contact and legal details

Replace this draft with the full privacy notice for the actual operating entity and target jurisdictions. Obtain qualified advice for UK GDPR, child privacy and international data transfers where applicable.