This policy is written as a preparation document. Statements about actual collection, legal bases, providers and retention must be aligned with the website’s implemented technology and reviewed before publication.
Scope and privacy controller
This policy is intended to explain how personal information is handled when a person visits the Paptra marketing website, submits a contact enquiry, requests a demonstration or follows a link to a related service.
Before publication, this section must identify the legal entity responsible for the website and state its registered address, jurisdiction, company information and privacy contact details.
- Full legal entity name
- Registered business address and jurisdiction
- Privacy contact email or rights-request channel
- Relationship between Paptra, Sholas and any service operator
Information collected
Depending on the final website configuration, information may include:
- Enquiry details: name, work email, company, job role, country or region, selected enquiry type and message.
- Demo-planning details: workflow, input formats, systems, deployment preference, session priorities, preferred date, time zone and language.
- Technical information: IP address, browser, device, operating system, referring page, access time and website interaction information if server logs or analytics are enabled.
- Communications: subsequent messages, scheduling details and information voluntarily provided during the business conversation.
The website asks users not to submit passwords, credentials, banking data, patient records, confidential production documents or other sensitive information through public forms.
How information may be used
Subject to final legal review and an identified lawful basis, information may be used to:
- Review and respond to an enquiry.
- Route a product, integration, deployment, partnership or support request.
- Prepare and coordinate a demonstration.
- Understand website performance and improve content.
- Protect the website, investigate misuse and maintain security.
- Comply with applicable legal or regulatory obligations.
The final policy must specify the lawful basis relied upon for each purpose in every relevant jurisdiction, including whether processing is based on consent, legitimate interests, steps requested before a contract or legal obligations.
Contact and demonstration forms
The current website implementation validates Contact and Demo forms in the browser but does not transmit their contents. Before submission is enabled, the selected endpoint, storage location, recipients, access controls, notification process and deletion procedure must be documented here.
The final wording must match the actual form-processing configuration. A policy should not claim that data is sent, stored or deleted in a particular way until that behavior has been implemented and verified.
Data retention
Specific retention periods have not been approved. Before publication, the organization should define how long it keeps website logs, unanswered enquiries, sales conversations, demo requests, support communications and suppression or consent records.
The final policy should explain either the applicable period or the criteria used to determine it, including legal requirements, business need, security and dispute handling.
Security safeguards
The final policy should accurately describe the organizational and technical measures used to protect website information. These may include access controls, encryption, secure transfer, monitoring, environment separation and supplier management, but only controls that are actually implemented should be stated.
No internet transmission or storage system can be guaranteed to be completely secure. Users should avoid sending sensitive or confidential data through general website forms.
International data handling
Hosting, form, communication or support providers may process information in more than one country. The actual processing locations and transfer safeguards are not confirmed in this draft.
Before launch, the organization should document where information is processed and identify any contractual, regulatory or other safeguards required for cross-border transfers.
Privacy rights
Depending on location and applicable law, individuals may have rights to request access, correction, deletion, restriction, portability or objection, and may be able to withdraw consent or complain to a supervisory authority.
The final policy must provide a verified request method, identity-verification process, response procedure and any jurisdiction-specific information. Rights can be subject to legal conditions and exceptions.
Children’s privacy
The Paptra website is intended for enterprise and professional audiences, not children. The final policy should specify the relevant minimum age and the response process if information from a child is discovered, based on the jurisdictions in scope.
Updates to this policy
When the final policy is published, it should display an effective date and explain how material changes will be communicated. Prior versions should be retained when required for accountability.
Privacy contact
A verified privacy email, postal address and—where required—representative or data-protection contact must be inserted before this policy becomes effective.
Until the privacy channel is confirmed, direct general product enquiries through the Contact page without including sensitive personal information.