Privacy notice — draft placeholder

This starter must not accept production personal information until an operator-approved GDPR privacy notice, retention policy, processor details and contact information have been published.