Draft governance document

Privacy notice

This prototype text must be reviewed by qualified legal counsel before commercial launch.

Information collected

The service may collect subscriber name, organisation, business email, mobile number, selected coverage areas, alert preferences, payment status and support communications.

Purpose

Information is used to activate subscriptions, deliver selected alerts, maintain service records, provide support and administer renewals.

Data minimisation

The founding platform should not collect precise live location, passport information or detailed travel itineraries unless a later service has a documented need and appropriate safeguards.

Sharing

Subscriber information should be shared only with contracted service providers required for email, SMS, hosting or payments, subject to appropriate agreements.

Retention and rights

Inactive account information should be retained only for a defined business or legal period. Subscribers should be able to request access, correction or deletion, subject to applicable obligations.

Security

The production platform should use role-based access, secure authentication, encrypted transmission, backups, access logging and a documented incident-response procedure.