This page explains what is recorded when you use this site, why, and what happens to it afterwards. It is written plainly so that you can decide before you fill anything in.

Who collects this

[[Name the organisation or body that runs this site and is responsible for this data.]]

What you enter yourself

If you complete and submit the form, the following is stored:

  • First name, last name and father's name
  • Date of birth
  • Email address, if you give one
  • Phone number with its country code
  • Country of residence and nationality
  • The language your message is written in
  • The text of your message

The form asks you to include your national ID number in the message so a request can be handled faster. That is optional — the form submits without it.

What is recorded automatically

Every time the form is displayed, the following is recorded — even if you never submit it:

  • Your IP address
  • The country and city estimated from that IP address
  • Your browser and operating system
  • The page address, its language, and the time of the visit

If that same visit ends in a submission, the two records are linked. The purpose is to measure how many people see the form against how many complete it.

The country lookup runs offline, against a database held on this server. Your address is not sent to any outside service to do it.

How this is protected

  • Your connection to the site is encrypted with HTTPS.
  • The message text is encrypted with AES-256-GCM before it is stored, and cannot be read without the server's key.
  • The other form fields — name, father's name, date of birth, phone, email, country and nationality — are not encrypted at rest. Anyone with access to the database can read them. We state this plainly because it should affect what you choose to send.
  • Your IP address is kept both in full and as an HMAC hash; the hash is what rate limiting uses.
  • The database runs on a separate server from the website and accepts connections only from that website's address.
  • The admin panel requires a username and password, and every time an administrator opens, edits or exports a request, that action is written to an audit log.

Other services in the path

  • Traffic to this site passes through Cloudflare, which sees your IP address and the page you requested.
  • The country flags in the form are loaded from flagcdn.com and commons.wikimedia.org. Those servers see your IP address when the form is displayed.
  • There is no analytics package, no advertising network and no social media tracker on this site.

Cookies

This site sets two cookies, neither of which tracks you:

  • A security cookie that stops another website submitting the form in your name.
  • A session cookie, created only after you submit, so your tracking code can be shown to you once.

How long this is kept

[[State your retention period here — for example "requests are kept for 24 months and visit logs for 90 days" — and then actually delete them on that schedule.]]

Your rights

You may ask to see, correct or delete the information held about you. Contact us and quote your tracking code so the request can be found.

[[Give the contact route for access and deletion requests here.]]

Something you should know

No website can promise perfect security. What you type into this form travels across the internet and is stored on a server. Before you write a national ID number, or anything else sensitive, weigh up what that means in your circumstances. Send only what you are confident about sending.

Changes to this notice

If this policy changes, the new text will be published on this page.