Legal
Privacy notice
This prototype collects nothing. No form is connected, no analytics runs, no cookie is set and no third-party script or font is requested from another domain.
Pending client evidence Draft structure only. A published notice must describe the real controller, the real purposes and lawful bases, the real recipients and processors, retention periods and the route to complain to the ICO.
What this prototype does today
- Forms are demonstrations. Submitting one does nothing and sends nothing.
- No cookie, local storage entry or tracking identifier is created.
- No analytics, map, chat, video, CAPTCHA or social embed is loaded.
- Links to Google reviews, GOV.UK and Companies House only contact those services if you click them.
- The site is not indexed and is not connected to any client account.
What the published notice has to cover
- Controller
- [Controller identity and privacy contact pending client confirmation]
- Purposes
- Responding to an enquiry, and providing the service asked for.
- Lawful bases
- [To be selected and documented per purpose before publication]
- Recipients and processors
- [Hosting, mail, CRM and workflow vendors pending]
- Retention
- [Retention periods pending client decision]
- Your rights
- Access, rectification, erasure, restriction, objection and portability where they apply.
- Complaints
- The Information Commissioner's Office, in addition to contacting Dukes.
Marketing choices stay separate from an enquiry. Acknowledging a privacy notice is not consent to marketing, and an optional marketing box is never pre-ticked.