Who we are
[Identify the organisation responsible for personal information collected through the website and the API (the “controller”, where that concept applies) and summarise what this policy covers.]
- Company
- [Company legal name]
- Registered address
- [Registered company address]
- Company number
- [Company registration number]
Information we collect
[Summarise the categories of personal information collected and where each one comes from.]
Account information
[Describe details collected at sign-up and in account settings, such as name, email address, company and login credentials.]
Usage and API logs
[Describe technical data recorded when the API is called, for example API key, endpoints requested, timestamps, IP address, user agent and error rates, and why it is recorded.]
Billing information
[Describe the billing details collected and whether card data is handled by a third-party payment processor rather than stored directly.]
Website analytics
[Describe data collected when people browse the website, such as pages viewed, referrer, device and approximate location, and the tools used to collect it.]
Communications
[Describe information received through support requests, sales enquiries, forms, emails and subscriptions to status or product updates.]
How we use information
[List the purposes information is used for, for example providing and securing the service, authenticating API requests, enforcing rate limits, billing, support, product improvement and service announcements.]
[State whether information is used for marketing and how people can opt out.]
Legal bases (if applicable)
[If laws such as the UK or EU GDPR apply, set out the legal basis for each purpose, for example contract, legitimate interests, consent or legal obligation.]
[Remove this section if it does not apply in your jurisdiction.]
Cookies and analytics
[Describe the cookies and similar technologies used on the website and any customer dashboard (strictly necessary, preferences, analytics) and the providers involved.]
[Explain how visitors can manage or withdraw consent and change their browser settings.]
Sharing and processors
[List the categories of recipients, such as hosting and infrastructure providers, payment processors, analytics, email and support tools, and professional advisers.]
[State whether personal information is sold or shared for advertising, and describe disclosures required by law or in a business transfer.]
International transfers
[Explain whether personal information is transferred outside the country or region where it was collected, and the safeguards used, such as adequacy decisions or standard contractual clauses.]
Data retention
[State how long each category of information is kept (account data, API logs, billing records, support messages), or the criteria used to decide, and what happens at the end of that period.]
Security
[Summarise the technical and organisational measures that protect information, such as encryption in transit, access controls and secure storage of API keys, without disclosing sensitive detail.]
[Explain how security incidents affecting personal information are handled and notified.]
Your rights
[Describe the rights people may have depending on where they live, for example access, correction, deletion, restriction, objection, portability and withdrawal of consent, and how to exercise them.]
[Explain how requests are verified, expected response times, and the right to complain to a data protection authority.]
Children’s privacy
[State that the service is not directed at children, the minimum age for using it, and what happens if information from a child is collected by mistake.]
Changes to this policy
[Explain how this policy may be updated and how people will be told about material changes.]
[Note that the effective date at the top of this page identifies the current version.]
Contact and data protection officer
[Explain how to contact the company about privacy questions or requests, and give the details of a data protection officer or local representative if one is appointed. General questions can also go through the contact page.]
- Company
- [Company legal name]
- Registered address
- [Registered company address]
- Privacy enquiries
- [privacy@yourdomain.com]
- Data protection officer
- [Name or role, if appointed]