Legal · Review draft

Privacy Policy

A working draft covering enquiry information and the website data practices that need business and legal review.

For review only — not a final policy.

This draft has not been legally reviewed and does not claim legal compliance. Confirmation markers are review notes, not statements of established practices.

1. About this draft

This document is a working draft for the ISOExpert.in website, not a final privacy policy. It distinguishes the current enquiry-form behavior from data practices that still need confirmation.

Review required: legal entity, applicable law and effective date

2. Information collected

The enquiry form asks for:

  • Full name and company name
  • A phone or WhatsApp number, or an email address (at least one is required)
  • The ISO standard you are considering, including an option to request help choosing
  • Optional information about your business

Submitted enquiries are validated and saved in Lovable Cloud. Email notifications are not enabled. This describes the form, not all information that hosting or other website services may process.

Review required: other data sources and technical logs

3. How information is used

The current form checks required details and the format of any phone number or email address provided. Valid submissions are saved for the business to review; no notification email is sent.

Before email notifications are enabled, the business must confirm why information will be used, who will handle it and what notices are needed.

Review required: purposes of use and applicable legal basis

4. Cookies and analytics

Cookie, analytics and similar tracking practices have not been confirmed for this draft. It does not assert that the website is free of cookies or tracking.

Review the hosting setup, embedded services and any analytics before describing their use or the choices available to visitors.

Review required: technologies, providers and consent settings

5. Data sharing and third-party services

The enquiry form stores submitted details in Lovable Cloud. Other services used to host or operate the website must be reviewed separately.

Any final policy should identify relevant providers, the information they receive and any applicable transfer arrangements.

Review required: providers, recipients and data transfers

6. Data retention and security

The enquiry form saves submissions. Retention periods for enquiries and other website data have not been confirmed.

Storage arrangements, access controls, deletion procedures and security measures need to be documented before they can be described as established practices.

Review required: retention, storage and security arrangements

7. User rights and contact information

Privacy rights and the process for making a request depend on the applicable law and the business’s confirmed data practices. No specific response deadline or request procedure is established by this draft.

The Contact section shows the current contact status. Its form saves enquiries but does not send email notifications; a verified privacy contact is required before publication.

Review required: request process and verified privacy contact