This template is designed for Fenyr's public website and business interactions. Counsel must finalize it against Fenyr's actual entities, data flows, vendors, retention practices, and operating jurisdictions before publication.
Draft notice — final legal approval pending. The supplied master contains policy templates. Legal entity, vendors, processing practices, contact details and jurisdiction-specific terms must be confirmed by Fenyr and its counsel. This draft is not a finalized policy.
This Privacy Policy explains how Fenyr [insert current legal entity/entities and business address] collects, uses, shares, protects and retains personal information when you visit our websites, submit a form, communicate with us, download a resource, apply for a job or otherwise interact with Fenyr outside a client-controlled secure environment.
Business contact information such as name, work email, phone, company and role; form responses and communications; website/device information such as IP address, browser, pages viewed, referring source, approximate location derived from IP and cookie identifiers depending on enabled technologies; business relationship information; and recruitment information such as resume/CV, qualifications and employment history.
To operate and improve the website; respond to requests; provide resources; communicate about services; manage business relationships; measure site and campaign performance; maintain security; recruit talent; comply with legal obligations; and establish, exercise or defend legal rights.
Fenyr may use essential, analytics, functional and advertising/marketing technologies depending on the final production configuration and consent choices. The Cookie Policy should list actual categories and vendors in use.
Fenyr may share information with service providers supporting hosting, analytics, CRM, communications, security, recruitment and professional services; with affiliates or transaction parties where appropriate; or when required by law. Do not state that Fenyr never shares data unless that is literally true across all relevant processing.
Fenyr uses administrative, technical and organizational measures appropriate to the nature of the information and business context. Retain information only as long as needed for the stated purpose, legal requirements, dispute resolution and security/accounting obligations. Publish exact retention periods only when operationally defined.
Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, restriction or information about certain processing. Fenyr should provide a monitored privacy contact method and verify requests before acting. Counsel should tailor this section to actual target jurisdictions.
If personal information is transferred across countries, Fenyr should use the contractual, organizational and legal mechanisms applicable to that transfer and data type.
The website is intended for business audiences and is not directed to children.
Public website forms are not intended for PHI or patient-identifiable information. If Fenyr handles PHI in contracted services, that processing occurs under the applicable client agreement, BAA where required, approved systems and security controls - not ordinary marketing workflows.
Show effective date and last-updated date. Provide a monitored privacy contact route and correct legal-entity mailing address.
