PREVIEW — NOT READY TO ACCEPT CUSTOMER DATA. Verify all processing, retention, email, hosting and payment-provider details and complete controller contact details before production.

Privacy Policy

Last updated: 6 November 2026

1. Data controller

WW2 Service Histories, a planned Finnish sole proprietorship.
Registered legal name: [REQUIRED BEFORE PRODUCTION]
Business ID: [REQUIRED BEFORE PRODUCTION]
Postal address: [REQUIRED BEFORE PRODUCTION]
Telephone: [REQUIRED BEFORE PRODUCTION]
Privacy contact: WW2ServiceHistories@gmail.com

2. Data processed and purposes

If you contact us, we may process your name, email, message and historical research details you choose to provide. Inquiries are used to respond and, if requested, prepare a free high-level preliminary assessment. If paid services are later offered, order, correspondence, payment-reference and research data may be processed to perform the contract, handle complaints and meet legal obligations. Please do not submit unnecessary personal information about living people.

The research request and extended research inquiry forms submit the details you enter to FormSubmit (formsubmit.co), which forwards them to WW2ServiceHistories@gmail.com. FormSubmit is a third-party form delivery provider and may process and retain submission data in its systems. Its documentation states that submissions are retained in its archive for 30 days. Review its privacy information before submitting. Your email address is used as the reply-to address. The website itself does not store the submitted form contents.

3. Legal bases

Depending on the interaction, processing may be necessary to take steps at your request before a contract, perform a contract, comply with legal obligations, or pursue legitimate interests such as responding to communications and protecting the service. Consent is used only where required, including for optional technologies if any are later added.

4. Historical research information

Research may concern people who served during World War II. Data protection laws generally treat information about deceased persons differently, but personal information about living customers or other living people remains protected. We aim to minimise it.

5. Retention

Inquiry information should be deleted when the inquiry is closed and no longer needed. Client research working files should be deleted promptly after confirmed delivery, unless a specific legal or contractual need justifies retention. No permanent archive of customer reports is intended. Necessary order and accounting records may be kept for statutory periods; Finnish accounting retention requirements can include at least six years for vouchers and ten years for certain accounting records. Email providers, logs and backups may retain data under their own schedules. These practices and precise periods must be confirmed before production.

6. Recipients and service providers

Cloudflare is intended to provide website hosting, delivery and/or security services. Cloudflare may process technical request and security information. FormSubmit (formsubmit.co) receives inquiry form submissions and forwards them by email; its service may retain submissions in an archive for 30 days. Google processes the resulting email in the recipient mailbox. This static preview has no payment integration, analytics or advertising tracker. Provider terms, actual processing locations, international-transfer safeguards and configuration must be checked before production.

Cloudflare privacy information: cloudflare.com/privacypolicy.

7. International transfers

Some providers may process data outside the European Economic Area. Before production, the controller must identify relevant transfers and ensure the safeguards required by applicable law.

8. Cookies and tracking

This static package contains no analytics or advertising scripts and is not designed to set optional tracking cookies. Cloudflare or a future configuration may involve technically necessary security functions; verify the actual deployment and disclose any technologies that apply.

9. Security

Appropriate technical and organisational measures should be used, including access controls and secure account practices. Actual handling procedures must be confirmed before accepting personal data.

10. Your rights

Where GDPR applies, you may have rights to access, correct, erase or restrict data, object to certain processing, request portability, withdraw consent where processing relies on consent, and complain to a supervisory authority. Contact WW2ServiceHistories@gmail.com. The Finnish supervisory authority is the Office of the Data Protection Ombudsman.

11. Changes and contact

This policy must be updated if actual practices change. WW2 Service Histories
WW2ServiceHistories@gmail.com
Registered name, Business ID, postal address and telephone: [REQUIRED BEFORE PRODUCTION]