LEGAL / PRIVACY
Privacy notice.
Launch requirement: replace the bracketed controller and contact details and have this notice reviewed for the final hosting, analytics and email setup before publishing.
1. Controller
[Legal entity or responsible individual]
[Postal address]
[Privacy email]
2. Information we collect
When you request private access, we collect the information entered in the form: name, email address, country, interest category, preferred capacity, project timeframe, message and consent status. We also record a submission identifier, timestamp, source page, browser user agent and referrer for delivery security and troubleshooting.
3. Purpose and legal basis
We process the information to respond to your request and, when you consent, to send product and prototype updates. For users in the European Economic Area, the intended legal basis is consent under Article 6(1)(a) GDPR and, where applicable, steps requested before entering a contract under Article 6(1)(b) GDPR.
4. Storage and processors
Form submissions are transmitted to a Google Apps Script web app and stored in a designated Google Sheet controlled by RWC. Google may process technical data as a service provider. Configure the Google Workspace region, access rights, retention and processing agreement appropriate to the final controller.
5. Retention
Retain private-preview records only while the request or consent remains active. Establish a documented deletion schedule before launch. Withdrawal does not affect processing already performed lawfully.
6. Your rights
Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability or withdrawal of consent, and may complain to a competent supervisory authority. Contact [privacy email].
7. Cookies and analytics
This build does not set marketing or analytics cookies. If analytics, advertising or embedded third-party services are added, update this notice and implement the consent mechanism required by the target markets.
8. Security
Administrative access to the Google Sheet and Apps Script deployment must use least-privilege permissions and multi-factor authentication. The public form endpoint validates fields, uses a honeypot and deduplicates submission identifiers; these controls do not replace operational security monitoring.