Draft privacy copy that can be reviewed and replaced later.
This text is intentionally conservative and simple. It is suitable as a draft policy until your final legal wording is ready.
This draft privacy policy explains how the site may collect contact form submissions, browser data, and basic analytics. It should be reviewed by counsel before publication if you intend to collect personal information.
At a minimum, the site should disclose what contact information is collected, how it is stored, what analytics tools are enabled, and how a visitor can request deletion or correction.
Information the site may receive
Browsing a website can create basic technical records such as an IP address, browser type, requested URL, referrer, and time of access. If a visitor contacts the publication, the message and reply address may also be received so the enquiry can be answered.
The site should only collect information needed for operation, security, measurement, or a clearly stated communication purpose. It should not request sensitive information through a general editorial contact route.
Choices and questions
Visitors should be told what analytics or embedded services are active, how long contact records are retained, and where privacy questions should be sent. Final retention periods and any rights process should be confirmed against the actual tools and hosting configuration before legal publication.
Data minimisation
Contact information should be used for the purpose for which it was supplied and retained only as long as needed for that purpose, legal obligations, security, or an active editorial conversation. Access to submitted messages should be limited to people who need it to respond or maintain the site.
This page should be updated when the site adds a form, analytics service, advertising technology, newsletter, or embedded third-party tool.
Keeping personal information safe
Visitors should avoid sending confidential records through a general editorial inbox. The publication should also document who can access submitted messages, how access is removed, and what happens when a request is closed.