Privacy policy
How 360 Digital Projects Ltd handles personal data for which it is the controller — account details, and demo enquiries.
This document is not finished. It has not been reviewed by a solicitor and is not yet contractual. Everything under “how the product behaves” is accurate and verifiable today; the legal wording is outstanding. If you need the finished document before proceeding, ask and we will get it to you.
How the product behaves today
- Account data: name, work email, job title and governance role, held to operate the service.
- Demo enquiries: when the demo is email-gated, we keep name, work email, company and role to know who is interested. No newsletter, no third parties, and the record is deleted outright on request.
- Passwords are stored only as a bcrypt hash. Reset and invitation links are stored only as a SHA-256 digest, so a database dump yields no working links.
- Sign-in attempts are rate limited, which records the address attempted and the network origin.
Still to be written
- Lawful basis stated per processing purpose
- Retention periods
- Data subject rights and how to exercise them
- The identity of the data protection contact
360 Digital Projects Ltd, company number 11251738, registered in England and Wales. Registered office: Suite 98, 95 Mortimer Street, London W1W 7GB.