Privacy policy

Please note: this is a demo website of a fictional company, Khorda. It shows how a request form, a cookie banner and consent for analytics work on a WordPress site. No real personal data is collected here.

1. Who is responsible for your data

On a real site the data controller is the company operating it (name, address and a contact for data questions). For this demo the contact details are fictional: hello@example.com.

2. What data we receive

• Request form: your name, phone and/or email, project type and message — only what you enter yourself.
• Technical data: the hosting provider processes your IP address and browser data to deliver pages and protect the site from attacks.
• Analytics: only if you clicked “Allow analytics” (see section 4).

In this demo the form validates the fields and replies “thank you”, but the data is neither stored nor sent anywhere.

3. Why and on what legal basis

Form data is needed to answer your request (Art. 6(1)(b) GDPR — steps prior to entering into a contract). Analytics runs only on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Cookies and analytics

A banner appears on your first visit. Until you choose, analytics is off: the site sets Google Consent Mode to analytics_storage: denied and no analytics cookies are placed.

After “Allow analytics” the state switches to granted and Google Analytics 4 is connected. This demo uses the placeholder ID G-DEMO000000 — it is not a real GA4 property, so Google’s script is not loaded here at all; on a live site the company’s own ID goes in its place.

• khorda-consent (localStorage, necessary) — remembers your analytics choice; kept until you clear your browser data.
• _ga, _ga_* (Google Analytics cookies, only with consent) — distinguish visitors for statistics; up to 2 years.

You can change your decision at any time via the “Cookie settings” link at the bottom of every page.

5. How long we keep data

On a live site requests are kept as long as needed to reply and to prepare a possible contract, but no longer than 12 months if no contract follows.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object to processing and to withdraw consent. You can lodge a complaint with your local supervisory authority.

7. Hosting

The site is hosted on Cloudflare Pages. Cloudflare processes technical request data as a processor to deliver pages and protect against attacks.