Proposed privacy approach
Hintonster should explain what customer information it collects, the purpose for collection, lawful basis, third-party sharing, retention periods, security controls and customer rights. The production site should avoid collecting unnecessary sensitive data through ordinary web forms.
Application information should be securely transmitted, access-controlled and retained only in line with the company’s approved legal, regulatory and operational requirements.
The website customer assistant and contact channels collect a customer’s name, email address, phone number, enquiry/complaint category and message so Hintonster can identify, record and respond to the submission. Production privacy wording should specify retention, access, sharing and deletion arrangements.