Last updated: [2025-10-04]

1) Controller & scope

The data controller is [Legal entity name], operating us21roadmarket.org. This policy explains how we process personal data when you use the Site.

2) What we collect & why (lawful bases)

• Site analytics (page views, device, referrer): Legitimate interests (improve the Site).
• Contact form (name, email, message, metadata): Legitimate interests/contract (respond to you).
• Newsletter (if enabled) (email, consent timestamp): Consent.
• Comments (if enabled): Legitimate interests/consent.
• Security logs (IP, user-agent, timestamps): Legitimate interests (fraud/abuse prevention).

We do not intentionally collect special categories of data.

3) Cookies & similar tech

We use cookies for essential functions, analytics, and—if enabled—marketing. Details and choices are in our Cookie Policy and the Cookie Settings link in the footer/banner.

4) Sources

Data comes from you (forms) and your device/browser (analytics, logs). We may receive aggregated reports from service providers.

5) Sharing & processors

We use service providers (hosting/CDN, analytics, email, support tools) under data-processing agreements. They must protect your data and act only on our instructions.

6) International transfers

If data is transferred outside your country, we use appropriate safeguards (e.g., Standard Contractual Clauses). Contact us for details via the Contact Form.

7) Retention

We keep data only as long as necessary:

• Analytics: [e.g., 14 months]
• Contact form messages: [e.g., 24 months]
• Newsletter list: until you unsubscribe + limited backup retention.

8) Your rights (GDPR/UK GDPR)

You may request access, rectification, erasure, restriction, objection, and data portability. If processing is based on consent, you can withdraw it anytime.
Submit requests only via Contact Form.. You can also complain to your local data protection authority.

9) CPRA/CCPA (California)

California residents may request access, deletion, correction, and opt-out of sale/share (we do not sell personal information). Submit requests via Contact Form.

10) Children

This Site is for adults. We don’t knowingly collect data from children.

11) Security

We use reasonable technical and organizational measures (encryption in transit, hardened hosting, least-privilege access). No method is 100% secure.

12) Changes

We’ll update this policy as needed and post the latest date above.

13) Contact

All privacy queries must be submitted through our form: Contact Form.
We do not process privacy requests by email or phone.