Privacy notice (draft)

Last updated: [DATE]. This notice explains how [COMPANY LEGAL NAME] (“we”), [REGISTERED ADDRESS], handles personal information collected through this website and during an Audit Defense Pack engagement.

1. What we collect on this website

• Fit check answers: your role, company size, AS9100 status, timing, tools, the records you could export, whether they contain restricted data, and budget fit.
• Contact details you enter: name, email, and optionally company, phone and a note.
• Technical data: our server uses your IP address briefly, in memory, to limit abuse. We do not store it with your answers. Our web server may keep standard access logs for [RETENTION PERIOD].
• Campaign tags: if you arrived from a link with utm_ tags, we store those tags with your answers.

This site uses no analytics, advertising trackers or cookies. It keeps your fit check answers in your browser's session storage until you close the tab. Fonts are loaded from Google Fonts, which receives your IP address when the page loads. [OWNER: consider self-hosting the fonts to remove this.]

2. Why we use it

• To reply to you and, if you ask, to arrange a call or an engagement. [LAWFUL BASIS, e.g. steps at your request before a contract / legitimate interests.]
• To send occasional updates, only if you ticked “keep me posted”. You can unsubscribe at any time.

3. Customer records during an engagement

Quality records you upload are handled under the Audit Defense Pack Services Agreement and described on our data and security page: processed on an encrypted workstation and by Anthropic (Claude) as a subprocessor, which does not train its models on our clients' data; deleted 30 days after the pack is delivered unless you convert to a subscription, or earlier on request, confirmed in writing. We do not accept export-controlled data or personal data beyond names, employee IDs and roles.

4. Who we share it with

• Anthropic, PBC, for AI-assisted analysis of engagement records.
• [INVOICING / ACCOUNTING PROVIDER], to issue and record invoices. Payment is by invoice only; this site takes no payments and no card details.
• [SCHEDULING TOOL], if you book a call.
• [EMAIL PROVIDER] for sending and receiving email.
• [HOSTING PROVIDER] for this website and the server that receives fit check answers.

We do not sell personal information.

5. How long we keep it

Fit check answers and contact details: [RETENTION PERIOD, e.g. 24 months from last contact]. Engagement records: as in section 3. Accounting records: as required by law.

6. Your rights

[Rights applicable in your jurisdictions, e.g. access, correction, deletion, objection, and how to complain to a regulator.] To exercise them, email us.

7. Changes

We will post changes here with a new date.