Version: offline v0.1 · Controller wording pending
1. Who is responsible for the data?
The final notice must state that AURELO 奥蕾文化 is the public-facing brand and accurately identify the legal entity corresponding to Youfang Culture. The exact registered company name must come from the user-approved contract template and must not be invented here.
2. What information may be collected?
- Business contact details: name, role, company and work contact.
- Project qualification information: target market, industry, timing, decision/problem and current evidence.
- Technical and consent records required to operate a lawful website form.
3. Why is it collected?
Only to assess whether AURELO can respond to a project enquiry, route the enquiry to an appropriate product or responsible person, manage the conversation and meet legal/security obligations. Marketing use requires a separate lawful basis and clear choice.
4. Data minimization and sensitive information
The first enquiry form should not request product formulas, health data, government identifiers, payment data or confidential case files. If later project work needs sensitive information, a separate controlled process and access rule is required.
5. Storage, service providers and international transfers
The final policy must name or categorize the form, CRM, analytics, hosting and email providers; explain storage locations and cross-border transfers; and define access and security responsibilities. These tools are not selected in this offline phase.
6. Retention and deletion
A retention schedule, deletion process and duplicate-lead rule must be approved before launch. “Keep forever” is not acceptable.
7. Rights and contact
The final notice must give a real work email or contact method for access, correction, deletion and objection requests, with a responsible owner and backup.
8. Cookies and analytics
Only necessary technologies should run by default. Any non-essential analytics or advertising technology requires documented configuration, disclosure and consent behavior appropriate to the target markets.
9. Changes and evidence
Every public privacy version requires a version number, effective date, owner, approval evidence and a test showing the live form matches the notice.