Scope
This draft describes topics the final policy must address. It does not claim that unconfirmed analytics, advertising, email, cookie, hosting, or form services are currently in use.
Information submitted by visitors
The final policy must identify information visitors can submit, why it is requested, where it is delivered, how long it is retained, and which service providers process it.
Technical data and cookies
Before launch, document the hosting logs, security records, cookies, analytics, embedded content, and other technical data actually used by the production website.
Sharing, retention, and security
Identify actual service providers, required legal disclosures, retention periods, deletion procedures, safeguards, and any international data transfers.
Visitor choices and contact
Confirm the privacy rights that apply to the target audience, the process for submitting a request, and an approved privacy contact channel.