Privacy should be configured before the first real enquiry.
This draft explains the intended minimum-data approach. Controller identity, retention, vendors and legal bases require final legal review.
Data collected
The consultation form requests contact details, nationality, current country, goal, timeline, preferred contact method and a free-text message. Do not send passport numbers, identity scans, criminal records, tax identifiers or financial statements through the public form.
Basic technical security logs may be processed to prevent abuse. Analytics is not enabled in this MVP.
Purpose, retention and sharing
Enquiry data is intended only to respond, assess service fit and keep an appropriate business record. The final controller, lawful basis, retention period, CRM/SMTP processors, international transfers and rights channel remain [REVIEW REQUIRED].
What to establish before you proceed
- Legal business/controller name
- Privacy email and address
- Applicable laws and lawful bases
- CRM and email processors
- Hosting and transfer locations
- Retention schedule
- Access/deletion/correction process
- Cookie and analytics configuration