Privacy Policy — Draft for owner review

This draft requires owner review before launch. Legal entity: [OWNER TO SUPPLY]. Privacy contact: [OWNER TO SUPPLY]. Effective date: [OWNER TO SUPPLY].

Information we collect

We collect the customer contact details, business/listing information, observations, agreed package, consent record, evidence-link metadata and verified payment references needed to provide assessments. We do not collect payment card details or customer Google passwords.

Purpose and lawful basis

We use submitted information to respond to enquiries, manage requests, deliver agreed services and retain appropriate transaction records. The owner must confirm applicable lawful bases and jurisdiction-specific notices before launch.

Google Drive evidence

Evidence remains in Google Drive. Our website stores links and descriptions, not document contents. Grant access only to the designated reviewer shown in the intake form; do not make confidential evidence public. Google’s terms and privacy policies apply to Drive. A URL does not prove permissions are available.

Payment and email providers

Payments use PayPal; notification delivery uses the configured transactional email provider or authenticated SMTP service. We share only information necessary for those services. The owner must confirm provider details and any international transfer safeguards.

Retention and deletion

Unpaid drafts expire after 30 days. Operational records are retained only as required for service delivery, legitimate records and applicable laws. A default operational retention target of 24 months must be reviewed by the owner; legal accounting obligations may require longer retention. Deletion requests are handled by the administrator, with required financial records retained and data minimized where appropriate. Backups must follow an owner-confirmed expiry policy.

Security and confidentiality

Access to requests is restricted to authorized administrators. We use access controls and appropriate security measures, but no system can promise absolute security. Do not submit passwords, card details or unnecessary personal information.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete or restrict processing of your information. Contact [OWNER TO SUPPLY]. We verify requests appropriately before releasing private information.

Analytics

Optional analytics are disabled until configured and consented where required. Private observations, email addresses, Drive links and confidential business details are not sent to analytics platforms.