1. Who we are

Business Website ("we", "us") operates this website. Our registered office is 120 Market Street, Suite 900, Boston, MA 02110, United States. You can reach us at privacy@businesswebsite.example.

2. What this website collects

This is a static website with no user accounts and no database. We only receive information that you choose to send us:

  • Contact and enquiry forms: your name, email address, optional company, phone number and message.
  • Newsletter sign-up: your email address.
  • Job applications: the details you provide in the application form.
  • Server logs held by our hosting provider: IP address, requested URL, timestamp and user agent.

In the delivered template the forms validate in the browser only and do not transmit data to any endpoint. When you connect them to your own service, that service becomes responsible for the data it receives.

3. Why we process it

  • To answer your enquiry – legitimate interest in responding to business contact.
  • To send the newsletter – consent, withdrawable at any time.
  • To assess your application – steps taken at your request before a contract.
  • To keep the site secure and available – legitimate interest in service integrity.

4. Cookies and analytics

The template ships without tracking cookies, advertising pixels or third-party analytics. If you add them, update this section, add a consent banner where your jurisdiction requires it, and document the retention periods of each tool.

5. How long we keep information

  • Enquiries: 24 months from the last contact.
  • Newsletter subscriptions: until you unsubscribe, plus 12 months of suppression data.
  • Applications: 12 months, or longer if you ask us to keep them on file.

6. Sharing and transfers

We share personal data only with service providers who help us operate – hosting, email delivery and, where applicable, our customer relationship system. Where data leaves your region, transfers rely on standard contractual clauses. We never sell personal data.

7. Your rights

Depending on where you live you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. Contact privacy@businesswebsite.example and we will respond within 30 days. You can also complain to your local supervisory authority.

8. Security

We apply least-privilege access, encryption in transit, periodic access reviews and logging across our environments. Our information security management system is certified to ISO 27001.

9. Changes to this policy

We update this page when our processing changes, and always show the revision date at the top. Material changes are announced on our insights page.