Draft policy — company review required
Privacy Policy
This draft describes the current website behaviour and identifies facts that Grandstlyle Global must confirm before it is published as its final privacy notice.
Scope of this draft
This policy applies to the Grandstlyle Global public website. It does not create a customer, supplier or employment privacy policy and does not describe any practice that has not been confirmed by the company.
Information the site may receive
If a secure enquiry endpoint is configured, the contact and quote forms may transmit the information a visitor enters, such as name, company, business email, country, product interest, quantity, message and consent record. As supplied, the forms validate in the browser and do not submit data because no endpoint has been configured.
The site may also store an essential-only privacy preference in the visitor’s browser when the visitor chooses to save it. This local preference is not transmitted by the site.
Why information would be used
If an enquiry service is enabled, information should only be used to review and respond to the business enquiry, manage a legitimate commercial follow-up and meet applicable legal obligations. Grandstlyle Global must confirm the lawful basis, retention period, recipients and responsible data controller before final publication.
Sharing, security and international transfers
The company must identify any form provider, email provider, hosting provider, CRM, analytics provider, advertising provider or other processor that receives personal data. It must also describe safeguards for data transfers where they are relevant. Do not state that information is never shared unless that claim is accurate.
Your choices and rights
Applicable privacy rights depend on the visitor’s location and the company’s practices. Before launch, provide a verified privacy contact method and a process for access, correction, deletion, objection or other requests where applicable.