DRAFT FOR UK SOLICITOR REVIEW — NOT YET IN FORCE. This document has not been reviewed by a solicitor, is not a finished legal notice, and must not be relied on, published, linked from a form, or shown to a customer or visitor as a statement of PrimeStart’s obligations until a qualified UK solicitor has reviewed and approved it and PrimeStart has confirmed it is in force.
Privacy Policy
This policy explains what information this website collects when you get in touch or request a quote, why it is collected, how it is stored, and what rights you have over it. It is written to describe what the website genuinely does, not as a template of general promises.
[DECISION REQUIRED: insert PrimeStart’s registered company name, company registration number, registered office address and, if applicable, VAT number, once confirmed. None of these details have been supplied and none are invented here.]
Information collected through the site’s forms
This website has four forms: a general contact form, a request-a-call-back form, the Get Started signup journey, and a checkout form used for both the Website and the Website + SEO plan, distinguished by which plan you have chosen. Between them, depending on which form you use, they may collect: your name, or first and last name; your business name; your email address; your phone number; a message or notes; what your business does; your main services; your main locations; whether your website is new or replacing an existing one; an existing website address (asked only by the Get Started signup journey, where it is optional); your preferred contact method; the best time of day to call you; the plan you have chosen; and an explicit tick-box confirming you consent to PrimeStart using these details to reply to you.
This website never receives, stores or logs an account password. Where a plan involves setting up an account, the password itself is deliberately not handled by these forms.
Why this information is collected
The information is collected so that PrimeStart can reply to your enquiry, call you back, assess whether a service is suitable, and set up an order for the plan you have chosen. It is not used for any other purpose.
[DECISION REQUIRED: the specific UK GDPR lawful basis relied on for each purpose (for example consent, or steps taken at your request before entering a contract) has not been confirmed by a solicitor and is not asserted here beyond the plain description above.]
How submissions are stored
When you submit one of this website’s forms, your answers are saved as a private record on the website, visible only to PrimeStart, and a notification is sent to PrimeStart’s own email address. The record is not published and is not visible to any other visitor.
The website also stores a hash of the IP address the submission came from, not the IP address itself. An IP address hash cannot be turned back into the original address; it is kept only to help identify abusive or automated submissions.
Cookies and similar technologies
This website sets very little. Specifically:
- A short-lived cookie, active for 15 minutes, that lets a form show you your own answers again if it has to display an error rather than making you start over. It is sent only over a secure connection and cannot be read by other scripts on the page. It is strictly functional and is not used to track you.
- A one-time reference stored in your browser’s session storage during a checkout, so that accidentally submitting the same checkout twice (for example by pressing back or double-clicking) does not create two orders. It is cleared when you close the browser tab or session.
- Short-lived records, keyed on the hashed IP address described above, used only to limit how often the same visitor can submit a form in a short space of time.
- If an analytics tool is present on the website, the site pushes events describing which step of a form or checkout journey was reached to that tool’s data layer. These events deliberately do not include your name, email, phone number or any other answer you have typed — only the shape of the journey (for example, that step 2 of the signup was reached), never its content.
[DECISION REQUIRED: confirm whether any analytics or advertising tool is actually installed on this website, name it here, and add a cookie-consent banner if one is required for it. No such tool is named or assumed anywhere in this policy, and no banner is described because none is confirmed to exist.]
Who this information is shared with
[DECISION REQUIRED: list every service that processes this data on PrimeStart’s behalf once confirmed — for example the hosting provider, the email delivery provider, any payment provider used at checkout, and any analytics provider named above — together with a short note on what each one does. None of these providers is named here because none has been confirmed for this document.]
[DECISION REQUIRED: if any of the above providers stores or processes data outside the UK or the European Economic Area, the transfer mechanism relied on (for example the UK’s International Data Transfer Addendum) must be confirmed and stated here. None is assumed or stated.]
PrimeStart does not sell your information to anyone.
How long this information is kept
[DECISION REQUIRED: a retention period for enquiry and checkout records has not been approved and is not stated here. This must be set and confirmed before this document is relied on.]
Your rights
Under UK data protection law, you have the right to:
- Ask what personal information is held about you, and get a copy of it (the right of access).
- Ask for incorrect information to be corrected (the right of rectification).
- Ask for your information to be deleted (the right of erasure), where it is no longer needed or in other cases the law allows.
- Ask for the use of your information to be limited while a concern about it is looked into (the right of restriction).
- Object to your information being used in certain circumstances (the right to object).
- Ask for a copy of your information in a format you can take elsewhere (the right to data portability), where that right applies.
- Complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you are unhappy with how your information has been handled.
[DECISION REQUIRED: confirm whether PrimeStart is registered with the ICO and, if so, the registration reference, once approved. No registration is claimed here because none has been confirmed.]
Children
This website’s forms are intended for business owners and decision-makers getting in touch about a commercial service, not for children.
Changes to this policy
PrimeStart may update this policy from time to time, for example to reflect a change in the law or in how the website works. Where a change is significant, PrimeStart will take reasonable steps to make that clear.
Contact
[DECISION REQUIRED: insert the confirmed contact method (email address and/or postal address) for questions about this policy, a request to exercise any of the rights above, or a complaint, once approved.]
Reminder: this page is a draft prepared for solicitor review. It has not been reviewed by a solicitor and is not currently in force.