Privacy notice

Template: fill in every highlighted blank before clients use this site. This is a starting point, not legal advice.

Who is responsible

[Business name], [address], decides how your information is used (the controller). Page Lemon hosts this site, runs the sign-in and stores updates, decisions, requests and attachments for us as our processor.

What we collect

• Your email address, to invite you and sign you in.
• The project updates we post for you: date, project, status, our note and a link to the files.
• Your project's phase, launch date and next call, as we enter them for you.
• Your decisions on each design round (approved or what to change) and your notes, with the status and replies we add.
• The requests you send: what you need, the project, the date and your details, with our status and reply (for example a quote).
• Your first name, if you add it to your profile, so we can greet you.
• If you join the Care plan: your plan and its renewal date. Stripe takes the payment; we never see your card details.
• Attachments you upload (PDFs or photos). We never ask for card, bank or ID numbers; please leave them out.
• Sign-in records (when and from which browser), to keep your account safe.

The files behind each link sit in [where shared files are stored, for example: our shared drive provider], under that service's own terms.

Why

To run the work you hired us for and answer your briefs ([legal basis, for example: our contract with you]).

Who sees it

You see only your own updates, decisions and requests. [Who at the studio sees them, for example: the two partners and any freelancer working on your project].

How long we keep it

[For example: for the project and 2 years after it ends; invoices for 6 years, as UK tax rules require]. When you leave, your decisions, requests and attachments are deleted, except records we must keep by law, which we tell you about.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, or object. Write to [privacy email]. You can also complain to [your data protection authority, for example the ICO in the UK].

Last updated [date].