I can create a fully compliant, ready-to-publish privacy policy, but I’m missing essential details that are legally required (identity and contact details of the controller, DPO/contact, and certain service-specific facts). To avoid inaccuracies or placeholders, please provide:
1) Controller details
– Legal entity name (e.g., Douglas Estates Limited) and trading name (if different)
– Registered/office postal address
– General contact phone number
– Primary privacy contact email (e.g., privacy@…)
– Whether you have appointed a Data Protection Officer (DPO). If yes: DPO name or role title and contact email. If no DPO: confirm the best data protection contact.
2) Website and processing specifics
– Core services offered via the site (e.g., property sales, lettings, valuations, property management, newsletter)
– Categories of individuals (e.g., vendors, buyers, landlords, tenants, applicants, website visitors)
3) Third-party processors and tools used via the site
– Hosting provider and location (UK/EU or elsewhere)
– Analytics/marketing tools (e.g., Google Analytics, Google Ads, Meta Pixel, Microsoft Clarity, Hotjar, LinkedIn Insight Tag)
– CRM/estate agency software (e.g., Reapit, Dezrez, Vebra, Jupix)
– Email/SMS providers (e.g., Mailchimp, SendGrid, Twilio)
– Live chat/helpdesk (e.g., Intercom, Zendesk)
– Appointment booking, forms, or survey tools (e.g., Calendly, Typeform)
– Payment processors (if any)
– Any property portals receiving data (e.g., Rightmove, Zoopla, OnTheMarket)
– Any international transfers outside the UK/EEA and safeguards in place (e.g., UK IDTA/EU SCCs)
4) Cookies and consent
– Whether you use a cookie consent banner and its provider (e.g., CookieYes, OneTrust, Complianz)
– List of cookies or at least categories and key tools, with typical lifetimes (strictly necessary, analytics, functional, advertising)
5) Retention periods (confirm or I can apply standard estate agency defaults)
– Enquiries/leads
– Viewings and offers
– Sales and AML/KYC records
– Tenancy applications, tenancy files, deposit and maintenance records
– Landlord/contractor records
– Marketing subscribers and marketing suppression lists
– CCTV (if applicable)
– Job applicants
6) Other
– Age restriction (e.g., services not directed to under-18s)
– Preferred effective date of the policy
– Preferred jurisdiction wording (UK GDPR, Data Protection Act 2018, and PECR are the default; confirm if you also target the EEA)
Once you share these, I will deliver the final, accessible HTML content with numbered sections, complete and ready to publish without placeholders.