Privacy policy
A starting template for UK client sites. It is not a finished legal document and does not make this demo GDPR-compliant.
Identity, contact details, and enabled third parties are filled from site.json and the pages that actually use them. Retention and other client fields sit on this page’s legal object. Review against current ICO guidance before production.
Who we are
Example Bakery Ltd (demo) is the controller of personal data collected through this website. We trade as Example Bakery (demo).
Unit 4, 14 Bengal Street · Manchester · Greater Manchester · M4 6LN · GB
How to contact us
Email hello@awe-demo.uk.
Telephone 01234 567890.
What we collect
- If you use the contact form: your name, email address, and message.
- Technical data a host may log when you load a page, such as IP address and browser type.
- If you choose to play an embed or a review widget loads, that provider may receive your IP address and device data. Those cases are listed under third-party services.
How we collect it
Most information comes from you when you submit the form, email us, or telephone. Some technical data is created automatically when your browser requests a page. We do not buy marketing lists for this website.
Why we use personal data
Responding to people who contact us, and operating this website.
Lawful bases
- Legitimate interests — answering enquiries and keeping this website running.
- Consent — only where we ask for it. Withdrawal is explained below.
Legitimate interests
It is in our legitimate interests to respond to people who contact us about the services shown on this site, and to host the pages themselves.
Who we share data with
The hosting company that serves these static files. On this site the contact form is not submitted to a processor (forms.adapter is none).
International transfers
We do not operate a CRM on this site ourselves. If you play a third-party embed listed below, that provider may process data outside the UK. Review each vendor before a live launch.
How long we keep it
This labelled demo does not store enquiry submissions (forms.adapter is none). A live client must set a real retention period before launch.
Your rights
UK GDPR gives you rights over your personal data, including access, correction, erasure, restriction, objection, and data portability, where they apply. This website does not make solely automated decisions that have legal or similarly significant effects.
Withdrawing consent
Where we rely on consent, you can withdraw it at any time by contacting us using the details above. Withdrawal does not affect processing already carried out.
Complaints
If you are unhappy with how we use your information, contact us first using the details above. UK law also expects you to be able to complain to the controller (us). You can complain to the Information Commissioner’s Office as well.
ICO: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Make a complaint to the ICO.
Cookies, analytics, and similar technologies
How this site uses cookies and similar technologies is explained on the cookies page.
Contact forms
The contact form is layout only on this site. Submissions are not sent to a mailbox or CRM while forms.adapter is none.
Third-party embedded services
Only services this build actually uses are listed. Google Analytics, Google Ads, and unused review or video providers are omitted.
- YouTube (Google): a preview is first-party until you press Play, then an iframe loads from youtube-nocookie.com. Google may then process your IP address and device data, including outside the UK.
This template was written against the ICO’s SME guide How to write a privacy notice and what goes in it. That page is under review because of the Data (Use and Access) Act. Check current ICO guidance when you customise a live client notice.
Last updated 4 September 2026.