Privacy Policy
Draft — not yet reviewed by legal counsel
1. Who we are
This website is operated by 360 Consultancy ("we"). You can contact us at the contact details published on this website.
2. What we collect
When you submit a booking request we collect your name, email address, phone/WhatsApp number, country of interest, selected service, preferred appointment time and any message you choose to write. We do not ask for passport numbers, identity documents or payment card details through this website. Please do not include such details in your message.
3. Why we use it
- To respond to your request and provide the service you asked for.
- To send booking, payment-instruction and confirmation messages.
- To verify bank-transfer payments and keep accurate business records.
- To protect the website against abuse.
4. Who we share it with
We use service providers to run the website and store data (for example our hosting provider, database provider and email provider). They process data on our behalf. We do not sell your personal data.
4A. Client portal and uploaded documents
If you create a portal account we store your name, email, optional phone number and a hashed password. Documents you upload (which may include your passport page, certificates and financial evidence) are stored in private storage, are visible only to you and our authorised staff, and are used only to review your documents and prepare your submission. Staff downloads are logged. Please upload only what the step asks for. [Business owner and counsel to confirm: lawful basis, where files are hosted, who may access them, and the retention and deletion period for documents.]
5. How long we keep it
We keep booking records for a limited period needed for service delivery, accounting and dispute handling, after which they are deleted. [Retention period to be confirmed by the business owner.]
6. Your rights
You may ask us to access, correct or delete your personal data, subject to legal requirements. Contact us using the details above.
7. Security
We use access controls, encryption in transit and limited staff access. No system is perfectly secure.
8. Changes
We may update this policy and will post the new version on this page.
