Privacy policy
How 360 Digital Projects Ltd handles personal data for which it is the controller — account details, and demo enquiries.
This document is not finished. It has not been reviewed by a solicitor and is not yet contractual. Everything under “how the product behaves” is accurate and verifiable today; the legal wording is outstanding. If you need the finished document before proceeding, ask and we will get it to you.
How the product behaves today
- Account data: name, work email, job title and governance role, held to operate the service.
- Demo enquiries: when the demo is email-gated, we keep name, work email, company and role to know who is interested. No newsletter, no third parties, and the record is deleted outright on request.
- Contact enquiries: name, work email, optional company and the message itself, kept so we can answer and so we can see what was asked. The network origin is recorded with it, to identify an abusive sender after the fact. Deleted outright on request.
- Passwords are stored only as a bcrypt hash. Reset and invitation links are stored only as a SHA-256 digest, so a database dump yields no working links.
- Sign-in attempts are rate limited, which records the address attempted and the network origin.
Still to be written
- Lawful basis stated per processing purpose
- Retention periods
- Data subject rights and how to exercise them
- The identity of the data protection contact
360 Digital Projects Ltd, company number 11251738, registered in England and Wales. Registered office: Suite 98, 95 Mortimer Street, London W1W 7GB.