Privacy policy
Outline only — have your DPO or counsel complete before go-live.
Controller
[Company name — placeholder], [registered address — placeholder], Luxembourg.
Data we process
Account data, order and billing details, communications, technical logs. [placeholder]
Legal basis
Contract, legitimate interests, consent where required (e.g. marketing cookies). [placeholder]
Your rights
Access, rectification, erasure, restriction, portability, objection — per GDPR. [placeholder]
Retention
As long as needed for orders, legal obligations and dispute resolution. [placeholder]
Contact
Privacy enquiries: privacy@example.com [placeholder]