Privacy Policy
Information about this website and how we work.
Draft privacy notice — facts must be verified.
This notice describes the intended handling of personal information on the Twizu demonstration website. Insert the actual controller and service-provider details, confirm retention and legal bases, and review against UK GDPR and PECR requirements before production.
1. Controller and contact details
The intended data controller is [INSERT LEGAL ENTITY / TRADING NAME], address [INSERT VERIFIED ADDRESS], privacy email [INSERT PRIVACY CONTACT]. This site is presented as Twizu; the actual operator and contact channels must be confirmed.
2. Information collected
When you contact us we may receive your first and last name (where supplied), email address, optional phone number, enquiry category and the text of your message. We may also process basic device, technical, IP, server-log and anti-spam information necessary for site operation and security. If you use an administrative account, WordPress may process account and authentication information. Additional information might be supplied during a later commercial conversation, under arrangements appropriate to that relationship.
3. How and why information may be used
- Responding to enquiries: to read, route and answer a message and consider a potential project.
- Planning a possible engagement: to discuss requirements, feasibility, scope and next steps.
- Maintaining site security: to prevent spam, investigate misuse and maintain operational logs.
- Legal and administrative obligations: where necessary to comply with applicable rules or preserve appropriate records.
Possible legal bases under UK GDPR include legitimate interests, taking steps before entering a contract at a person’s request, and legal obligations where applicable. [VERIFY AND DOCUMENT ACTUAL LAWFUL BASES AND ANY REQUIRED LEGITIMATE INTERESTS ASSESSMENT.] We do not assume that a general enquiry amounts to marketing consent.
4. Submissions and email notifications
The Twizu contact page uses WS Form PRO. Messages are intended to be recorded as website submissions and can generate an administrator email notification. This may create separate copies in WordPress, email systems and backups. The form includes a spam honeypot. Email messages should not be regarded as an encrypted or confidential information channel.
5. Sharing and processors
Information may need to be processed by the website host, email services, security or backup providers and technical support providers only where appropriate. [LIST ACTUAL HOSTS, EMAIL SERVICES, BACKUP PROVIDERS, SECURITY TOOLS, SUBPROCESSORS AND THEIR DATA-PROCESSING ARRANGEMENTS.] We do not intend to sell visitor information. We do not claim all third parties are absent; an audit of the installed plugins is necessary.
6. International transfers
If data is transferred outside the United Kingdom, the actual transfer mechanism and safeguards must be identified, such as an applicable adequacy decision or appropriate contractual protections. [CONFIRM LOCATIONS, ACCESS ROUTES AND SAFEGUARDS FOR EVERY PROCESSOR.]
7. Retention and deletion
The new WS Form enquiry workflow has been configured with a nominal 90-day submission-expiry setting. This does not automatically cover administrator email copies, system logs or retained backups, and the effective deletion process has not been independently audited. [CONFIRM FORM RETENTION, EMAIL RETENTION, BACKUP EXPIRY AND ANY REQUIRED EXCEPTIONS.]
8. Security
Reasonable security measures should be selected in proportion to the data and risks involved, including restricted access, software updates and suitable hosting controls. No internet service can guarantee complete security. [VERIFY ACTUAL TECHNICAL AND ORGANISATIONAL CONTROLS BEFORE CLAIMING COMPLIANCE.]
9. Your rights
Subject to applicable data-protection law and any exceptions, you may have rights of access, rectification, erasure, restriction, objection and portability. You may withdraw consent where consent is the legal basis. Direct requests to [INSERT PRIVACY CONTACT] or use the contact page. You may also raise a concern with the UK Information Commissioner’s Office at ico.org.uk.
10. Children, automated decisions and marketing
This business-focused demonstration site is not directed towards children. We do not intend to make solely automated decisions about individuals based on enquiry form submissions. Any future mailing list, profiling, analytics or advertising will require an updated notice and, where relevant, lawful consent and controls.
11. Cookies, Google reviews and external content
Read our Cookie Policy. When a real Google Business Profile reviews widget or other third-party service is connected, its data collection and cookie behaviour must be reviewed before it is enabled, and this notice updated accordingly.
12. Updates and version
Draft prepared 13 October 2026. [ADD DATE OF LAST REVIEW, APPROVER AND CONTACT DETAILS.] This notice should be checked whenever site functionality, integrations or the business operator changes.