Owner review draft — not an adopted policy. Online enquiry collection remains disabled. These drafts are included for review on this private site.
Privacy Notice draft

Privacy starts
with clarity.

A draft notice for owner review before online enquiry collection is enabled.

Draft prepared: 19 October 2026 · Effective date: not yet set

1. Who operates this website

Data Privacy Council (DPCI) is an initiative of Paryoma Foundation, a Section 8 not-for-profit institution. Before launch, the operator must confirm its address and privacy contact for this notice.

2. The current website

Enquiry forms are not connected to a submission service. Entered form values are held in the open page and are not saved by the website in local storage or sent to DPCI. Downloading an enquiry creates a text file on your device. You control that file and its subsequent use.

This website does not include added advertising or analytics scripts. Hosting and access services may process technical connection and access information; provider details and retention must be confirmed before public launch.

3. Proposed enquiry collection

When enabled under an approved notice, enquiries would collect your name, email and area of interest, plus optional organisation, role, telephone and message. The intended purpose is to understand and respond to your request and administer relevant enquiries.

4. Optional programme updates

Optional marketing consent is separate, unchecked by default and not required for a response. A withdrawal mechanism and verified contact must be established before updates are sent.

5. Access and sharing

The proposed approach is to restrict access to authorised personnel and approved service providers needed to handle enquiries. Specific processors, hosting arrangements and any relevant international processing must be documented before collection begins.

6. Retention and security

Retention periods, deletion processes, access controls and incident handling procedures require approval before online submissions are enabled. The final notice must describe the actual arrangements rather than assume them.

7. Requests and concerns

The final notice must identify an operational route for privacy requests and grievances, explain applicable procedures and state a verified contact. Do not send sensitive information through an unverified channel.

Owner actions before adoption: Confirm the operator address, privacy contact, hosting and processor disclosures, applicable processing basis, retention periods, safeguards and request-handling arrangements. Review the final notice against the services actually deployed.