Draft — review required before launch
This policy is a structured draft. The highlighted fields must be completed in site.config.ts, and the full policy should be reviewed by a qualified legal adviser for the jurisdictions in which ALTARYS operates (for example, the UAE Personal Data Protection Law and, where applicable, the EU/UK GDPR) before the website is published.
Legal
Privacy Policy
Last updated: [TO CONFIGURE: date]
01Who we are
This website is operated by [TO CONFIGURE: registered legal entity name] (“ALTARYS”, “we”, “us”), registered in [TO CONFIGURE: jurisdiction] under registration number [TO CONFIGURE: registration number], with its registered address at [TO CONFIGURE: registered address].
For the purposes of applicable data protection law, ALTARYS is the controller of personal information collected through this website.
02Information we collect
When you submit a consultation enquiry, we collect:
- your name, business email address, company name and role;
- your company website, if provided;
- your business type and the area you would like to discuss;
- any additional context you choose to share.
This website is intended for business enquiries only. Please do not submit patient names, medical histories, diagnoses or any other health or clinical information. If such information is submitted, we will delete it.
This website does not use advertising or analytics trackers. If this changes, this policy will be updated and any required consent will be requested beforehand.
03How we use your information
- to respond to your enquiry and arrange a consultation;
- to discuss and, where agreed, provide our services;
- to keep appropriate business records.
Our lawful basis is [TO CONFIGURE: lawful basis, e.g. legitimate interests / steps prior to a contract / consent — confirm with legal adviser]. We do not sell your personal information.
04Service providers
We may use trusted service providers to operate this website and deliver enquiries (for example, website hosting and email delivery). They process information only on our instructions.
Current providers: [TO CONFIGURE: list hosting, email and CRM providers once selected].
05International transfers
Some providers may process information outside your country. Where this happens, we rely on appropriate safeguards: [TO CONFIGURE: transfer safeguards — confirm with legal adviser].
06Retention
We keep enquiry information for [TO CONFIGURE: retention period] unless a longer period is required for an ongoing business relationship or by law.
07Your rights
Depending on where you are located, you may have the right to access, correct, delete or restrict the use of your personal information, to object to its processing, and to lodge a complaint with a data protection authority ([TO CONFIGURE: relevant supervisory authority]).
08Security
We use appropriate technical and organizational measures to protect personal information. Credentials used to deliver enquiries are stored securely on the server and are never exposed in the website itself.
09Contact
For privacy questions or requests, contact us at [TO CONFIGURE: privacy contact email].