Legal · Review draft
Privacy Policy
A working draft covering enquiry information and the website data practices that need business and legal review.
This draft has not been legally reviewed and does not claim legal compliance. Confirmation markers are review notes, not statements of established practices.
1. About this draft
This document is a working draft for the ISOExpert.in website, not a final privacy policy. It distinguishes the current enquiry-form behavior from data practices that still need confirmation.
Review required: legal entity, applicable law and effective date2. Information collected
The enquiry form asks for:
- Full name and company name
- A phone or WhatsApp number, or an email address (at least one is required)
- The ISO standard you are considering, including an option to request help choosing
- Optional information about your business
Submitted enquiries are validated and saved in Lovable Cloud. Email notifications are not enabled. This describes the form, not all information that hosting or other website services may process.
Review required: other data sources and technical logs3. How information is used
The current form checks required details and the format of any phone number or email address provided. Valid submissions are saved for the business to review; no notification email is sent.
Before email notifications are enabled, the business must confirm why information will be used, who will handle it and what notices are needed.
Review required: purposes of use and applicable legal basis6. Data retention and security
The enquiry form saves submissions. Retention periods for enquiries and other website data have not been confirmed.
Storage arrangements, access controls, deletion procedures and security measures need to be documented before they can be described as established practices.
Review required: retention, storage and security arrangements7. User rights and contact information
Privacy rights and the process for making a request depend on the applicable law and the business’s confirmed data practices. No specific response deadline or request procedure is established by this draft.
The Contact section shows the current contact status. Its form saves enquiries but does not send email notifications; a verified privacy contact is required before publication.
Review required: request process and verified privacy contact