Policy
Privacy Policy
Draft — not legal advice
This document is a structured draft prepared during the build of this website. It has not been reviewed by a lawyer or a compliance professional, it does not reflect a finalised business, and it must not be relied on. Several clauses depend on decisions the business has not yet made, and those gaps are marked. It requires qualified review before this site trades.
What this covers
How Guard Theory handles personal information collected through this website. Guard Theory is not currently trading and collects the minimum necessary.
What is collected
- Waitlist. Email address, and optionally first name, size preference, sleeve preference and training experience. Provided voluntarily and used only to send release notifications.
- Contact form. Name, email address, enquiry type and message, used only to reply.
- Comments. Where enabled, the name, email address and IP address supplied.
- Server logs. Standard web server records including IP address, kept for security and diagnostics.
- Cookies. Covered in the cookie notice.
What is not collected
No payment details, since no payment is possible. No special category data. No behavioural profiling. No data brokered from third parties.
Legal basis and consent
Marketing email is sent on the basis of consent, given by an unticked box that you tick yourself. Consent is never pre-selected and never bundled into another action. Every message contains an unsubscribe link that works immediately.
Sharing
Personal information is never sold. It is shared only with service providers strictly necessary to run the site, such as the hosting provider and, in future, an email delivery service.
[Pending business decision: the email delivery provider, hosting provider identity, and data processing locations must be named here once chosen]
Retention
Waitlist data is kept until you unsubscribe or ask for deletion. Contact messages are kept only as long as needed to resolve the enquiry.
[Pending business decision: specific retention periods]
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or port your data, to object to processing, and to complain to a supervisory authority. Requests are handled through the contact page.
[Pending business decision: data controller legal name, registered address, privacy contact address, and named supervisory authority]