Privacy policy generator

# Privacy policy for Example Studio Ltd

Last updated: [date]

## 1. Who we are

Example Studio Ltd ("we", "us", "our") runs the website https://www.example.com. We decide how the personal information described in this policy is used, and we are responsible for it.

This policy explains what we collect, why, who we share it with, how long we keep it and the choices you have.

## 2. What we collect

Depending on how you use the website, we may collect:

- **Enquiries:** your name, email address, phone number if you give it, and your message.
- **Newsletter:** your email address, your name if you give it, and whether you open or click our emails.
- **Usage data:** the pages you visit, the site that referred you, your device and browser type, and your approximate location based on your IP address.
- **Cookies and similar technologies:** see the Cookies section below.
- **Technical data:** our hosting provider records your IP address, browser type, the pages you request and the time of each request, to keep the site secure and working.

## 3. Why we use it and our legal basis

We use personal information only for the purposes below. Where the law requires a legal basis, it is shown in brackets.

- To reply to your enquiry (steps you ask us to take before a contract, or our legitimate interests).
- To send our newsletter (your consent, which you can withdraw by unsubscribing at any time).
- To understand how the site is used and improve it (your consent where the law requires it, otherwise our legitimate interests).
- To keep the website secure and prevent abuse (our legitimate interests).
- To meet our legal, tax and accounting obligations (legal obligation).

We do not sell your personal information.

## 4. Who we share it with

We share personal information only with service providers that help us run the website and the business, and only as far as they need it to do their job:

- **Google Analytics** (Google): website analytics.
- **Vercel**: website hosting and request logs.
- **Resend**: sending emails from the website, such as form notifications.
- **Mailchimp** (Intuit): newsletter delivery and subscriber lists.

We may also disclose information when the law requires it, to protect our rights, or to a buyer if the business is sold.

## 5. International transfers

Some of our service providers store or process data outside India, including in the United States. When information is transferred abroad, we rely on safeguards the law recognises, such as [standard contractual clauses or an adequacy decision].

## 6. How long we keep it

- Enquiries that go no further: [12 months] after our last message.
- Newsletter subscribers: until you unsubscribe. We keep a record of the unsubscribe so we do not email you again.
- Analytics data: [14 months].
- Server logs: [30 days].

When we no longer need information, we delete it or make it anonymous.

## 7. Your rights

The rights you have depend on the law that applies to you, for example the Digital Personal Data Protection Act 2023 (DPDP Act) and its Rules. They may include the right to:

- Ask for a copy of the personal information we hold about you.
- Ask us to correct information that is wrong or incomplete.
- Ask us to delete your information when we have no reason to keep it.
- Object to, or ask us to limit, how we use it.
- Withdraw your consent at any time, where we rely on consent.

You may nominate another person to exercise your rights if you die or become unable to do so. You can raise a grievance with [name of contact person] at [email], and we will respond within [time period].

To use any of these rights, email privacy@example.com. We will reply within [30 days] and may ask you to confirm your identity first. You can also complain to the Data Protection Board of India.

## 8. Cookies

We use cookies and similar technologies, such as local storage.

- **Strictly necessary:** needed for the site to work, for example to remember your cookie choice. These are always on.
- **Analytics:** help us count visits and see which pages are used, set by Google Analytics. We only set these after you agree.

You can change your choice at any time using the Cookie settings link on the website, or block cookies in your browser settings.

## 9. Children

Our website is not intended for children under [18], and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

## 10. Changes to this policy

We may update this policy when our website, our providers or the law change. The date at the top shows the latest version. If a change is significant, we will [tell you by email or show a notice on the website].

## 11. Contact us

For questions about this policy or your information, email privacy@example.com or write to Example Studio Ltd, 12 Example Street, Example City, 000000.

<h1>Privacy policy for Example Studio Ltd</h1>
<p>Last updated: [date]</p>
<h2>1. Who we are</h2>
<p>Example Studio Ltd (&quot;we&quot;, &quot;us&quot;, &quot;our&quot;) runs the website https://www.example.com. We decide how the personal information described in this policy is used, and we are responsible for it.</p>
<p>This policy explains what we collect, why, who we share it with, how long we keep it and the choices you have.</p>
<h2>2. What we collect</h2>
<p>Depending on how you use the website, we may collect:</p>
<ul>
  <li><strong>Enquiries:</strong> your name, email address, phone number if you give it, and your message.</li>
  <li><strong>Newsletter:</strong> your email address, your name if you give it, and whether you open or click our emails.</li>
  <li><strong>Usage data:</strong> the pages you visit, the site that referred you, your device and browser type, and your approximate location based on your IP address.</li>
  <li><strong>Cookies and similar technologies:</strong> see the Cookies section below.</li>
  <li><strong>Technical data:</strong> our hosting provider records your IP address, browser type, the pages you request and the time of each request, to keep the site secure and working.</li>
</ul>
<h2>3. Why we use it and our legal basis</h2>
<p>We use personal information only for the purposes below. Where the law requires a legal basis, it is shown in brackets.</p>
<ul>
  <li>To reply to your enquiry (steps you ask us to take before a contract, or our legitimate interests).</li>
  <li>To send our newsletter (your consent, which you can withdraw by unsubscribing at any time).</li>
  <li>To understand how the site is used and improve it (your consent where the law requires it, otherwise our legitimate interests).</li>
  <li>To keep the website secure and prevent abuse (our legitimate interests).</li>
  <li>To meet our legal, tax and accounting obligations (legal obligation).</li>
</ul>
<p>We do not sell your personal information.</p>
<h2>4. Who we share it with</h2>
<p>We share personal information only with service providers that help us run the website and the business, and only as far as they need it to do their job:</p>
<ul>
  <li><strong>Google Analytics</strong> (Google): website analytics.</li>
  <li><strong>Vercel</strong>: website hosting and request logs.</li>
  <li><strong>Resend</strong>: sending emails from the website, such as form notifications.</li>
  <li><strong>Mailchimp</strong> (Intuit): newsletter delivery and subscriber lists.</li>
</ul>
<p>We may also disclose information when the law requires it, to protect our rights, or to a buyer if the business is sold.</p>
<h2>5. International transfers</h2>
<p>Some of our service providers store or process data outside India, including in the United States. When information is transferred abroad, we rely on safeguards the law recognises, such as [standard contractual clauses or an adequacy decision].</p>
<h2>6. How long we keep it</h2>
<ul>
  <li>Enquiries that go no further: [12 months] after our last message.</li>
  <li>Newsletter subscribers: until you unsubscribe. We keep a record of the unsubscribe so we do not email you again.</li>
  <li>Analytics data: [14 months].</li>
  <li>Server logs: [30 days].</li>
</ul>
<p>When we no longer need information, we delete it or make it anonymous.</p>
<h2>7. Your rights</h2>
<p>The rights you have depend on the law that applies to you, for example the Digital Personal Data Protection Act 2023 (DPDP Act) and its Rules. They may include the right to:</p>
<ul>
  <li>Ask for a copy of the personal information we hold about you.</li>
  <li>Ask us to correct information that is wrong or incomplete.</li>
  <li>Ask us to delete your information when we have no reason to keep it.</li>
  <li>Object to, or ask us to limit, how we use it.</li>
  <li>Withdraw your consent at any time, where we rely on consent.</li>
</ul>
<p>You may nominate another person to exercise your rights if you die or become unable to do so. You can raise a grievance with [name of contact person] at [email], and we will respond within [time period].</p>
<p>To use any of these rights, email privacy@example.com. We will reply within [30 days] and may ask you to confirm your identity first. You can also complain to the Data Protection Board of India.</p>
<h2>8. Cookies</h2>
<p>We use cookies and similar technologies, such as local storage.</p>
<ul>
  <li><strong>Strictly necessary:</strong> needed for the site to work, for example to remember your cookie choice. These are always on.</li>
  <li><strong>Analytics:</strong> help us count visits and see which pages are used, set by Google Analytics. We only set these after you agree.</li>
</ul>
<p>You can change your choice at any time using the Cookie settings link on the website, or block cookies in your browser settings.</p>
<h2>9. Children</h2>
<p>Our website is not intended for children under [18], and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.</p>
<h2>10. Changes to this policy</h2>
<p>We may update this policy when our website, our providers or the law change. The date at the top shows the latest version. If a change is significant, we will [tell you by email or show a notice on the website].</p>
<h2>11. Contact us</h2>
<p>For questions about this policy or your information, email privacy@example.com or write to Example Studio Ltd, 12 Example Street, Example City, 000000.</p>