Privacy notice — draft for completion
Complete before going live: Insert the legal identity and postal contact details of the data controller, a working privacy email, and your verified retention schedule and hosting/processor details.
Who is responsible?
South Coast Boat Hire — [insert legal trading entity, postal address and privacy email] is the intended data controller for website enquiries.
Information collected
When you enquire we collect your name, email address, telephone number, chosen boat, requested dates and duration, collection or delivery preference, delivery/launch address and postcode if applicable, end-of-hire arrangements, and any comments you provide. We also record the enquiry time and its processing status.
Why and on what basis?
We use this information to respond to your request, assess suitability and availability, quote for collection/delivery, discuss terms and handle possible arrangements. The usual UK GDPR lawful basis is taking steps at your request before entering into a contract, and, where relevant, legitimate interests in managing enquiries. Any separate marketing will require an appropriate lawful basis and electronic-marketing compliance; the current form has no marketing opt-in.
Who sees the information?
Authorised business personnel and contracted hosting, email or technical providers may process the information to operate the service. Provider identities and any overseas transfer safeguards must be completed after hosting is selected. This starter version stores enquiries in a local server-side SQLite database and does not itself email third parties.
Retention
Enquiries should be retained only as long as needed for quotation, administration, complaints and lawful recordkeeping. [Insert approved retention periods for unsuccessful enquiries and bookings.]
Your rights
Depending on circumstances, you can request access, correction, erasure, restriction, objection and data portability, and complain to the Information Commissioner’s Office at ico.org.uk. Contact [insert privacy email] for a privacy request.
Security
The website includes session-based administration and validation measures but must be deployed with HTTPS, restricted server permissions, secure backups and a strong administrator password. Website deployment must be reviewed before public use.
Cookies
See the cookie notice. This starter site does not include advertising or analytics scripts.
Last drafted: 19 October 2026.