Draft status: illustrative material; publication date and review history must be confirmed by the adopting organization.
This page outlines subjects that a privacy notice may need to explain. It is not an adopted policy and makes no claim about how Alderwick Advisory or any other organization collects, uses, shares, or protects personal information. Before adapting the material, map the real site, forms, vendors, and data flows; then tailor every statement to evidence and applicable law.
On this page, the illustrative inquiry form only displays an on-screen confirmation when submitted. It does not send or save the entered content. That description applies to this page’s current form behavior only, not to another site or any separate service.
Who and what the notice covers
Identify the legal entity responsible for the relevant processing, the website or services covered, and any important limits to the notice’s scope. Explain key terms in plain language and identify where a different notice or contract may apply.
Information collected and its source
Describe the specific categories of personal information actually handled, whether it comes directly from a person, a device, another organization, or another source, and which features require it. Depending on the real service, categories might include identifiers and contact details, inquiry or account content, transaction or preference information, device and usage data, or information supplied by a business contact. Distinguish information entered by a person from technical logs, cookies, public sources, and information received through a service provider. State which fields are required or optional and include only categories verified for the organization.
Purposes and legal grounds
For each relevant use, explain the specific purpose and the applicable legal basis where required, linking each purpose to the categories of information used. Depending on the facts and jurisdiction, possible grounds may include consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation, protection of vital interests, or legitimate interests balanced against people’s rights. These are drafting prompts, not claims about the practices on this site. Explain whether providing information is optional or required and the practical consequence of not providing it. Where consent is relied upon, explain how to withdraw it without suggesting that withdrawal makes earlier processing unlawful.
Cookies and similar technologies
Inventory cookies, pixels, local storage, analytics, embedded media, and similar technologies used by the real site, including those set by third parties. For each category, explain its purpose, duration, provider, and whether it is essential or optional where applicable. Describe consent choices, how to change them, and browser controls; browser blocking may affect site functionality and may not replace a consent mechanism required by local law. Do not state that tracking is or is not used until the site, its code, and its dependencies have been checked.
Recipients, service providers, and transfers
Explain when and why information may be disclosed, identifying recipient categories such as hosting or technology providers, analytics or communications vendors, professional advisers, business partners, public authorities, or parties involved in a corporate transaction only where those categories match actual practice. Distinguish service providers acting on instructions from recipients that determine their own purposes, and describe relevant contractual or other safeguards. Identify countries or regions involved when required. For international transfers, specify the applicable transfer mechanism and how a person can obtain information about safeguards; do not imply that a transfer is protected merely because a vendor has published privacy terms. Confirm vendor roles, locations, and agreements before publication.
Retention and protection
Set out realistic retention periods for each major category or clear criteria for determining them, based on the actual business need, system capabilities, limitation periods, and legal obligations. Explain when information is deleted, anonymized, or archived and how backups or legal holds are handled where relevant. Describe security measures only at a level that is accurate and safe to publish; do not imply that any measure eliminates risk. Confirm how people will be notified if a legally reportable incident occurs.
Individual choices and rights
Explain the rights and choices available in each relevant jurisdiction and any conditions or exceptions. Depending on applicable law, these may include access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of certain automated decisions. Describe how to submit a request, how identity or authority may be verified proportionately, how authorized representatives are handled, and the response timeframe required by law. Explain any right to complain to a relevant regulator. Provide a contact route that the organization has confirmed is monitored and able to handle requests; do not publish an unverified address or promise a response time that has not been operationally confirmed.
Automated decisions and profiling
Determine whether personal information is used for profiling or decisions made solely by automated means, especially decisions with legal or similarly significant effects. If so, explain the logic at a meaningful level, the information and likely effects involved, and any rights or human-review options required by law. If no such processing occurs, state that only after verifying the systems and vendors in scope.
Children’s information and sensitive data
State the intended audience and explain whether the service is directed to children or knowingly handles children’s information. Address sensitive or special-category information only if it is actually collected or inferred, and explain the additional legal condition and safeguards where required. Confirm age thresholds, consent rules, and deletion or escalation processes with qualified counsel rather than relying on generic wording.
Changes and privacy questions
Describe how material updates will be communicated, when they take effect, and show the actual effective date and review history. Explain whether people will be notified directly when a change materially affects their rights or choices, where required. Before publication, replace this guidance with the organization’s confirmed details for privacy inquiries and requests. The contact page contains an illustrative address and a form that does not transmit or store entries, so neither should be used to make a real privacy request.
For the companion illustrative website-terms material, see Terms of use; use the sitemap to find the other public pages.