Data inventory
The final policy must list form fields, event analytics, cookies, logs, service providers, retention periods and disclosures actually used in the deployed product.
- State each collection purpose
- Separate required processing from optional marketing
- Limit precise accident details in analytics
- Provide deletion and access instructions where applicable
- Update the policy before adding a new recipient
Accident-plan privacy
Plan answers should remain client-side or use a clearly documented short-lived processing path unless the visitor deliberately saves or emails the result.