Privacy Policy

1. Controller details

Legal entity / owner: [TODO: legal entity or sole trader name]

Registered address: [TODO: registered business address]

Contact email: [TODO: privacy contact email]

Contact phone: [TODO: privacy contact phone, if used for privacy requests]

2. What data we collect

The website may process the following categories of personal data:

• Contact details you actively provide, such as name, email address, and phone number.
• Professional and business information submitted through the partner application form.
• Technical data required for core website delivery and security.
• Optional analytics data only when you explicitly opt into analytics cookies.

3. Partner registration form

The partner registration form collects the information shown in the form itself, including identity details, location, referral potential, industries, professional profiles, and any optional notes you decide to submit.

The data is used to:

• Review your suitability for the partner program.
• Contact you about your application and next steps.
• Maintain an internal record of applications and related communications.

The legal basis for this processing is the need to take steps at your request before entering into a potential business relationship, together with the controller's legitimate interest in managing partnership applications. Submission of the form is not bundled with optional marketing consent.

4. Retention

Partner application records are retained for [TODO: define retention period, for example X months after last contact]. If an application is approved or converted into an active partner relationship, relevant records may be kept longer where needed for contract management, accounting, or legal compliance.

5. Recipients and processors

The repository indicates that the following processors or service providers may be involved:

• Vercel for hosting and, only with consent, website analytics.
• Supabase for storing partner-program application and lead data.
• Resend for transactional email delivery related to partner submissions.

Add any missing processors here: [TODO: confirm full processor list].

6. Cookies and similar technologies

Necessary storage is used to remember your cookie preferences. Optional analytics cookies remain disabled unless you opt in. See the Cookie Policy for more detail.

7. International transfers

If service providers process data outside the EEA, describe the transfer mechanism here: [TODO: confirm transfer destinations and safeguards].

8. Your rights

Depending on applicable law, you may have the right to:

• Request access to your personal data.
• Request correction or deletion.
• Request restriction of processing.
• Object to certain processing.
• Request portability where applicable.
• Withdraw cookie consent at any time for optional categories.
• Lodge a complaint with your local supervisory authority.

9. How to contact us

Send privacy-related requests to [TODO: privacy contact email].

10. Updates to this policy

This policy should be reviewed whenever processing activities, cookie settings, or third-party service providers change. The current version should include an internal review date: [TODO: add review date].