Carewaves respects your privacy and is committed to protecting your personal information.
When you contact us through this form, we may collect the information you choose to provide, including your:
Name
Email address
Any information you include within your message
We use the information you provide to:
Respond to your enquiry
Communicate with you about the services, products or projects you have asked us about
Keep appropriate records of our correspondence
Take steps towards providing a service where you have asked us to do so
We will not use the information submitted through this contact form to send you unrelated marketing communications unless you have separately agreed to receive them.
Depending on the nature of your enquiry, we process your information because it is necessary for our legitimate interests in responding to enquiries and operating our business, or because it is necessary to take steps at your request before entering into a contract.
We will only keep information submitted through this form for as long as reasonably necessary to deal with your enquiry and for any legitimate business, legal or record-keeping requirements that may follow from it.
If your enquiry leads to us working together, some information may need to be retained for longer for contractual, financial or legal purposes.
We do not sell your personal information.
Your information may be processed by trusted service providers that help us operate our website, email or other business systems. Where we use third-party providers, we take appropriate steps to ensure personal information is handled securely and in accordance with applicable data protection law.
Under UK data protection law, you may have rights relating to your personal information, including the right to request access to your information, ask us to correct inaccurate information, request deletion or restriction in certain circumstances, and object to certain types of processing.
If you would like to exercise any of these rights or have a question about how we use your information, please contact:
Carewaves
Email: emma@carewaves.co
You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
A couple of important points: I wouldn't put an “I consent to my data being processed” checkbox on an ordinary contact form unless you specifically need consent as your lawful basis. The ICO makes clear that consent isn't always required, and responding to an enquiry can often be handled under another appropriate lawful basis. Information Commissioner's Office
Instead, immediately below your Submit button I'd use something simple like:
By submitting this form, you acknowledge that Carewaves will use the information you provide to respond to your enquiry. [Read our Privacy Notice].
If you also want to collect marketing/newsletter consent, make that a separate, optional, unticked checkbox, because consent for marketing needs to be a genuine positive choice. Information Commissioner's Office
One thing I'd change once you decide it: the ICO recommends specifying how long you retain contact-form enquiries, rather than simply saying “as long as necessary”, where you can reasonably set a period. Information Commissioner's Office For Carewaves, something such as 12 or 24 months after the last communication could make the policy more precise.
The ICO also has specific small-business guidance for privacy notices, which is worth using as the benchmark. ICO guidance on writing a privacy notice
If you tell me exactly what fields are on your contact form (e.g. name, email, phone, company, message, newsletter checkbox), I can tighten this into a short, polished pop-up version rather than something that feels like a full legal policy.