Who controls the data
The controller is [COMPANY NAME]. Add the registered address, company number and a monitored privacy email before launch.
Data and purposes
Document the exact customer, order, payment, analytics and support data the final website processes. Do not list tools that are not actually enabled.
- Order fulfilment and customer support
- Legal accounting obligations
- Optional analytics and marketing with valid consent
Providers and transfers
Name the hosting, payment, email, analytics and other processors used in the final deployment. Explain any transfers outside the EEA and the applicable safeguards.
Retention and rights
Define real retention periods. Explain access, correction, deletion, restriction, portability, objection and complaint rights, including the correct supervisory authority.