Privacy notice (draft)

Last updated: [DATE]. This notice sets out how [COMPANY LEGAL NAME] (“we”), [REGISTERED ADDRESS], treats the personal information it collects on this website and in the course of an Audit Defense Pack engagement.

1. What we collect on this website

• Fit check answers: your role, company size, IATF 16949 status, timing, tools, the records you could export, whether they contain restricted data, and budget fit.
• Contact details you enter: your name and email, plus your company, phone number and a note if you choose to add them.
• Technical data: to limit abuse, our server holds your IP address in memory for a short time. It is not saved with your answers. Standard web server access logs may be retained for [RETENTION PERIOD].
• Campaign tags: when the link that brought you here carried utm_ tags, those tags are saved alongside your answers.

The site sets no cookies and runs no analytics or advertising trackers. Your fit check answers stay in your browser's session storage until the tab is closed. Its fonts come from Google Fonts, so Google receives your IP address as a page loads. [OWNER: self-hosting the fonts would remove this; decide before launch.]

2. Why we use it

• To answer you and, at your request, to set up a call or an engagement. [LAWFUL BASIS, for example: steps taken at your request before entering a contract / legitimate interests.]
• To send an update now and then, and only if you ticked “keep me posted”. You can unsubscribe whenever you like.

3. Customer records during an engagement

The Audit Defense Pack Services Agreement governs the quality records you upload, and our data and security page describes how they are handled. In short: they are processed on an encrypted workstation and, as our subprocessor, by Anthropic (Claude), which does not train its models on our clients' data; they are deleted 30 days after your pack is delivered unless you continue with a subscription, or sooner if you ask, with written confirmation. Export-controlled data, and personal data other than names, employee IDs and roles, are not accepted.

4. Who we share it with

• Anthropic, PBC, which carries out the AI-assisted analysis of engagement records.
• [ACCOUNTING OR INVOICING TOOL], if one is used to issue your invoice. Payment is by invoice only; this site takes no card details.
• [SCHEDULING TOOL], if you book a call.
• [EMAIL PROVIDER], through which our email is sent and received.
• [HOSTING PROVIDER], which hosts this website and the server that collects fit check answers.

We do not sell personal information.

5. How long we keep it

Fit check answers and contact details are kept for [RETENTION PERIOD, for example 24 months after we were last in contact]. Engagement records: as in section 3. Accounting records: as required by law.

6. Your rights

[The rights that apply where you live, for example access, correction, deletion and objection, and how to complain to a regulator.] To use any of them, email us.

7. Changes

We will post changes here with a new date.