DRAFTnot legal advice
Privacy wording for your site
Your visitors should know what happens to their enquiry. Adapt this wording for your own privacy notice: change the words in square brackets, and check it with whoever advises you.
DRAFT, not legal advice. Written as a starting point for a solicitor to check before Enquiry opens to the public. It isn’t in force, and nothing here is a promise yet. Marks like [To decide: this] are things still to be decided.
Last changed 26 Oct 2026. Earlier versions: none.
Wording to adapt
Enquiries through our website. When you send us a message through a form on [your website], we receive what you type in it [and any files you attach]. We use it to reply to you and to deal with your enquiry; our lawful basis is [our legitimate interest in answering enquiries / taking steps at your request before a contract].
The form is run for us by Enquiry, a service of Bromputers, which stores the enquiry on Cloudflare and emails it to us. Uploaded files are stored in the EU. Your IP address is used to stop spam and is kept only in a disguised (hashed) form. [If the form has a captcha: The form uses [Cloudflare Turnstile / hCaptcha] to check you are not a bot, which receives your IP address.]
We keep enquiries for [period, at most one year] and then they are deleted. To see, correct or delete what we hold about you, contact [your email].
Notes for you
- Pick the retention period on each form’s Settings and use the same figure here.
- If the form sends an autoresponse, say that the visitor will get an email confirming their message.
- If you ask for anything sensitive (health, for example), you need more than this wording: get advice first.