Legal
Privacy policy.
A clear account of how personal information is handled in connection with this website.
Draft template. Business and legal review are required before production.
Before publication
This is a drafting template, not a final privacy notice. Domantha Ltd must confirm its live data flows, lawful bases, suppliers, retention periods, international transfers and privacy contact details, then obtain appropriate business and legal review before this page is published.
1. Status and scope
This template is for privacy information relating to domantha.com. It does not confirm that every activity or service described below is already in use. It must be reconciled with the production website and the organisation's records of processing before launch.
Domantha products may operate under independent brands and should have their own privacy information where their processing differs from this corporate website.
2. Who is responsible
Where Domantha Ltd decides why and how personal information is used through this website, it will act as the data controller. Its registered office, company number and operational privacy contact have not yet been confirmed in the website configuration and must be added before production.
Until a dedicated privacy contact is confirmed, visitors can select Privacy enquiryon the contact page. That route must be tested and monitored before the notice is approved.
3. Information we may use
The final notice should identify only information the live website actually collects, including:
- information a visitor chooses to provide with an enquiry, which may include their name, contact details, organisation, enquiry category and message, depending on the final form;
- technical and security records generated when the website is used, such as IP address, request time, browser or device information and server logs, if retained by the hosting setup; and
- cookie or similar-technology information only where confirmed in the live inventory described in the cookie policy.
If information is obtained from another source, the final notice must name that source or describe it as specifically as possible. No third-party data source, marketing list or automated profiling is confirmed by this template.
4. Purposes and lawful bases
Lawful bases must be selected and documented before processing begins. The following is a review framework, not a declaration that each activity is active:
| Possible purpose | Basis to verify |
|---|---|
| Receive, route and respond to enquiries. | Legitimate interests in operating the business; steps requested before a contract; or a legal obligation, depending on the enquiry. |
| Protect the website, investigate faults and prevent misuse. | Legitimate interests in service security and resilience, and legal obligations where they apply. |
| Use an optional feature that genuinely relies on consent. | Consent, with a clear way to refuse or withdraw it without detriment. |
If Domantha relies on legitimate interests, the final notice must state the specific interest and the organisation should document its balancing assessment. Required form fields and the consequence of not providing them must also be made clear at the point of collection.
6. Retention and security
No retention periods have been approved. Domantha must set and document proportionate periods for each category of information, explain either the period or the criteria used to decide it, and securely delete or anonymise information when it is no longer needed.
Appropriate technical and organisational safeguards should reflect the actual service and risks. No certification, security standard or guarantee is claimed here.
7. Your rights
Depending on the circumstances and lawful basis, people may have rights to access their personal information, correct it, have it erased, restrict its use, receive it in a portable format, and object to its use. Where processing relies on consent, consent can be withdrawn at any time. Withdrawing consent does not affect processing already carried out lawfully.
Your right to object
You may have a right to object to processing based on legitimate interests. Any request will be considered against the circumstances and the requirements of data protection law.
Rights do not apply identically in every situation. Domantha must verify identity where appropriate, respond within the applicable time limit and explain any lawful restriction on a request.
8. Contact, complaints and changes
Privacy questions or rights requests can be started through the contact page. A direct privacy email or postal address must be inserted here before production.
Anyone with a concern should first give Domantha an opportunity to address it. They also have the right to complain to the UK Information Commissioner's Office. Current contact and complaint routes are available at ico.org.uk/make-a-complaint.
This notice should be reviewed regularly and updated before any new use of personal information begins. The final page must display an accurate effective date and a clear summary of material changes.